DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-21 13:28:55 UTC

Analyzing DNSSEC problems for HSR.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 33751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to e.root-servers.net for HSR.GOV/A
	Received 614 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 614 octets ;; HEADER SECTION ;; id = 2808 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 610 octets ;; HEADER SECTION ;; id = 62171 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 370 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 370 octets ;; HEADER SECTION ;; id = 56793 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 48748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.GOV for HSR.GOV/A
	Received 362 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 362 octets ;; HEADER SECTION ;; id = 168 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) HSR.GOV. 10800 IN NS a1-252.akam.net. HSR.GOV. 10800 IN NS a24-67.akam.net. HSR.GOV. 10800 IN NS a26-64.akam.net. HSR.GOV. 10800 IN NS a3-65.akam.net. HSR.GOV. 10800 IN NS a6-66.akam.net. HSR.GOV. 10800 IN NS a7-67.akam.net. HSR.GOV. 3600 IN DS ( 43981 8 2 185d5736cd7cba2c5992cfdd21de4afaccb309b545246df88b0ff40742d602a2 ) HSR.GOV. 3600 IN DS ( 46294 8 2 6c85b624349b464689866d26fff3479851a01aeae842990722f740b7eaf0d11a ) HSR.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142855 20260420122855 35496 gov. 87C6VDUHycyM6Jfv8g93FHKAYesqg9u45TFiXUuAFBcjGvJUxKcK98UmAVkJUljaL1wjgILu6MOv KvzzpeGwaw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.GOV for HSR.GOV/DNSKEY
	Received 362 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 362 octets ;; HEADER SECTION ;; id = 17380 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) HSR.GOV. 10800 IN NS a1-252.akam.net. HSR.GOV. 10800 IN NS a24-67.akam.net. HSR.GOV. 10800 IN NS a26-64.akam.net. HSR.GOV. 10800 IN NS a3-65.akam.net. HSR.GOV. 10800 IN NS a6-66.akam.net. HSR.GOV. 10800 IN NS a7-67.akam.net. HSR.GOV. 3600 IN DS ( 43981 8 2 185d5736cd7cba2c5992cfdd21de4afaccb309b545246df88b0ff40742d602a2 ) HSR.GOV. 3600 IN DS ( 46294 8 2 6c85b624349b464689866d26fff3479851a01aeae842990722f740b7eaf0d11a ) HSR.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142855 20260420122855 35496 gov. jrZfEIiGdYxDcqbf8x+K18dEc12x0uF/U1Tcjpy+W38qW7aapmMvJTuqtC5GV2Y5/y90ckJkxPly G5Vr/sEyIQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone HSR.GOV

HSR.GOV

	Checking DS between GOV and HSR.GOV
	Query to c.ns.GOV for HSR.GOV/DS
	Received 231 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 231 octets ;; HEADER SECTION ;; id = 16007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN DS ;; ANSWER SECTION (3 records) HSR.GOV. 3600 IN DS ( 43981 8 2 185d5736cd7cba2c5992cfdd21de4afaccb309b545246df88b0ff40742d602a2 ) HSR.GOV. 3600 IN DS ( 46294 8 2 6c85b624349b464689866d26fff3479851a01aeae842990722f740b7eaf0d11a ) HSR.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142855 20260420122855 35496 gov. lVLKrHKNhgKzvSrT6K2QtJiX2g5NUPCQkH0IDeXVP3OStQ5S8L0wX6OEjdj9z5Hx9uG5fkcbidZd MQT3EUxz1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for HSR.GOV in the GOV zone
	DS=43981/SHA-256 has algorithm RSASHA256
	DS=46294/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`HSR.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142855 20260420122855 35496 gov. lVLKrHKNhgKzvSrT6K2QtJiX2g5NUPCQkH0IDeXVP3OStQ5S8L0wX6OEjdj9z5Hx9uG5fkcbidZd MQT3EUxz1g== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=43981/SHA-256 is now in the chain-of-trust
	DS=46294/SHA-256 is now in the chain-of-trust
	`HSR.GOV. 3600 IN DS ( 43981 8 2 185d5736cd7cba2c5992cfdd21de4afaccb309b545246df88b0ff40742d602a2 )`
	`HSR.GOV. 3600 IN DS ( 46294 8 2 6c85b624349b464689866d26fff3479851a01aeae842990722f740b7eaf0d11a )`
	Query to a3-65.akam.net for HSR.GOV/DNSKEY
	Received 1474 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 1474 octets ;; HEADER SECTION ;; id = 20499 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) HSR.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAb9A+KNtXONDitC8CM5+3TYXvOfEdlldrI4VKngmSFv2XkEo1fl+Ue6h0XIvcr6bNHKeulWl DLlmropEiJ//JJlBYi3sWn8Dq/+XfhLSdRWXQawEAvkJRqYDY53vEce3Ex1WktO5LtehJqNR6bca 0bt1uy3dZp7Xj3nrQNkNXdcN ) ; keytag 11788 HSR.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAbQZ1G63unnves8U87wm/GwytwLTA11dHJcEmTYxmkf5LxSoyi67QrHPUv/Yi46TtnnpoatL nIOD9W32YUMZRZcDO/K+SrbdFKMroAbGpHNzBc9z8rSfs1yLc6huCZ53leJ8ZWouXed/e7y1+n1z lOmflTIccssNk7PlFX/i4l99vA9yvj/WYdlLX/j6jWamOKjPndO5fTIcglVTZbDIpWt46kGrTDjq grC9K/cbdmUSoqzhP8j+uzt4+ykeXNT/9sIGVvRnsaJXhSuMWVhBwLnhPNxoj3wV+W6HaFLwI87V C6YCxwBWqt2GDKWdcYK58iXLCc6iSWbs9idNxBbUsuM= ) ; keytag 43981 HSR.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAeb1UYQWB+twLCH3zuQ1DPf93uina2qgzw7y6fQlCKRC8ysvlOla580AOr1c+dS1O/0fyhRP geRC3Afo1eqd0in23++DUDmNTXeLZlvTkJb5QDx/BBUato7lftayBMoSLnX+JR45GMaTWBdBqzaw +k/oGQ9AcI7KshvWAgZnr7Qn ) ; keytag 9348 HSR.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAYqBitEsJd8VUPB9pmupYvG4tUBzdewg/WbDNfPMekagVExwc+TSqlsCy1dkHxtcVvC44SG3 yOaesWLSUQ6gM4Q7ZBekW3L4t1A+GadhPkqwnnuOraBH2VT9mDHhwQ/n8Q4qRTy6kwjKvK/cfRBj Xc/0qQJ8mp2EMxnLYHQ1Wf/nzzySmHxRajlQbie/CjDahuP6ZCWGA356dsPVI+md1Kr+uwO0EXFT UzLn1PoxuhB44dUQYA3BkMMemgDk45XvvKirmfg731n3l4jW4nbivZGYfiNjAeqVw9axUij+ESiI S8fxjDM0AHSXgIpmFSfZYwspdHIMfL6Qb+ZMy4RcsQk= ) ; keytag 37297 HSR.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260424080118 20260421070118 37297 hsr.gov. ZX6dHBXAKVjfF4IS0x4MG+Bjs9RdluZqTB/GK92FFfVIQibzSA5msEnY+dZ1O1Aj6l9x0UsE7gMc 4OOQsIj6Yp3KH0Kt3y/fowpGp0dI5BJGb5lFLz5l19fJT9fwtJ1feDPGOGUXUTwjSXpmhDTbJQvj E0sB9NdYp3nyGPUU+uZM56EmIb8Ol2DA1mby4lgkmsN5K0vrdbSLHmobkbdGXEpjUptdKgs6lv9g 8anhONOUAEBAAGySn84a2Gf7HzuxXFijUAeFDJT0ye6DrsRs8qvyd/rt/8y+6LKZD/UsDu6ffxYp MbYpNezBIMwtd409o4rLhMAqDw/YWOQM2K7KYw== ) HSR.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260424080118 20260421070118 43981 hsr.gov. ME7N42X8nlMs627nt3yb7eDpUubd5XTUya8lC2Nt1qwTI+OyusA1NKB0EglzlxLVDPqlGCAoq5vR 7mK6bmqK3bD6jMNc93kEfSVeyFcYsikSMbBY7RG6c/5X/GcNkB0ULQrh4w6OKqixOtaV2kuk2NJT CTQZpOihSJ5PEM89UKkeAiP8VSAfwygkzA0szvFGBto6JXIDlPJSNlikAXEdAzkxVMrmWhQ/D3jn E6aLDec9jX4s4btxxaq+TkKfZlh5tkPnhdTd4Ikz4ZLMvXSdUfjPIHN2rsoOKkkRpoYEOAb4L33r oBVbxdCX3hRE9JL/jNcmGNSfbKyyHgYDLBgRFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for HSR.GOV
	`HSR.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAb9A+KNtXONDitC8CM5+3TYXvOfEdlldrI4VKngmSFv2XkEo1fl+Ue6h0XIvcr6bNHKeulWl DLlmropEiJ//JJlBYi3sWn8Dq/+XfhLSdRWXQawEAvkJRqYDY53vEce3Ex1WktO5LtehJqNR6bca 0bt1uy3dZp7Xj3nrQNkNXdcN ) ; keytag 11788`
	`HSR.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAbQZ1G63unnves8U87wm/GwytwLTA11dHJcEmTYxmkf5LxSoyi67QrHPUv/Yi46TtnnpoatL nIOD9W32YUMZRZcDO/K+SrbdFKMroAbGpHNzBc9z8rSfs1yLc6huCZ53leJ8ZWouXed/e7y1+n1z lOmflTIccssNk7PlFX/i4l99vA9yvj/WYdlLX/j6jWamOKjPndO5fTIcglVTZbDIpWt46kGrTDjq grC9K/cbdmUSoqzhP8j+uzt4+ykeXNT/9sIGVvRnsaJXhSuMWVhBwLnhPNxoj3wV+W6HaFLwI87V C6YCxwBWqt2GDKWdcYK58iXLCc6iSWbs9idNxBbUsuM= ) ; keytag 43981`
	`HSR.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAeb1UYQWB+twLCH3zuQ1DPf93uina2qgzw7y6fQlCKRC8ysvlOla580AOr1c+dS1O/0fyhRP geRC3Afo1eqd0in23++DUDmNTXeLZlvTkJb5QDx/BBUato7lftayBMoSLnX+JR45GMaTWBdBqzaw +k/oGQ9AcI7KshvWAgZnr7Qn ) ; keytag 9348`
	`HSR.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAYqBitEsJd8VUPB9pmupYvG4tUBzdewg/WbDNfPMekagVExwc+TSqlsCy1dkHxtcVvC44SG3 yOaesWLSUQ6gM4Q7ZBekW3L4t1A+GadhPkqwnnuOraBH2VT9mDHhwQ/n8Q4qRTy6kwjKvK/cfRBj Xc/0qQJ8mp2EMxnLYHQ1Wf/nzzySmHxRajlQbie/CjDahuP6ZCWGA356dsPVI+md1Kr+uwO0EXFT UzLn1PoxuhB44dUQYA3BkMMemgDk45XvvKirmfg731n3l4jW4nbivZGYfiNjAeqVw9axUij+ESiI S8fxjDM0AHSXgIpmFSfZYwspdHIMfL6Qb+ZMy4RcsQk= ) ; keytag 37297`
	DNSKEY=43981/SEP is now in the chain-of-trust
	DS=43981/SHA-256 verifies DNSKEY=43981/SEP
	DS=46294/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`HSR.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260424080118 20260421070118 37297 hsr.gov. ZX6dHBXAKVjfF4IS0x4MG+Bjs9RdluZqTB/GK92FFfVIQibzSA5msEnY+dZ1O1Aj6l9x0UsE7gMc 4OOQsIj6Yp3KH0Kt3y/fowpGp0dI5BJGb5lFLz5l19fJT9fwtJ1feDPGOGUXUTwjSXpmhDTbJQvj E0sB9NdYp3nyGPUU+uZM56EmIb8Ol2DA1mby4lgkmsN5K0vrdbSLHmobkbdGXEpjUptdKgs6lv9g 8anhONOUAEBAAGySn84a2Gf7HzuxXFijUAeFDJT0ye6DrsRs8qvyd/rt/8y+6LKZD/UsDu6ffxYp MbYpNezBIMwtd409o4rLhMAqDw/YWOQM2K7KYw== )`
	`HSR.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260424080118 20260421070118 43981 hsr.gov. ME7N42X8nlMs627nt3yb7eDpUubd5XTUya8lC2Nt1qwTI+OyusA1NKB0EglzlxLVDPqlGCAoq5vR 7mK6bmqK3bD6jMNc93kEfSVeyFcYsikSMbBY7RG6c/5X/GcNkB0ULQrh4w6OKqixOtaV2kuk2NJT CTQZpOihSJ5PEM89UKkeAiP8VSAfwygkzA0szvFGBto6JXIDlPJSNlikAXEdAzkxVMrmWhQ/D3jn E6aLDec9jX4s4btxxaq+TkKfZlh5tkPnhdTd4Ikz4ZLMvXSdUfjPIHN2rsoOKkkRpoYEOAb4L33r oBVbxdCX3hRE9JL/jNcmGNSfbKyyHgYDLBgRFA== )`
	RRSIG=37297 and DNSKEY=37297/SEP verifies the DNSKEY RRset
	RRSIG=43981 and DNSKEY=43981/SEP verifies the DNSKEY RRset
	DNSKEY=11788 is now in the chain-of-trust
	DNSKEY=9348 is now in the chain-of-trust
	DNSKEY=37297/SEP is now in the chain-of-trust
	Query to a3-65.akam.net for HSR.GOV/A
	Received 219 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 219 octets ;; HEADER SECTION ;; id = 64816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN A ;; ANSWER SECTION (2 records) HSR.GOV. 20 IN A 23.4.76.238 HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. y/H5T3waM+rlEvTm/kEd4NgCDL8ZlwUNtV36pow9dXfmWYAdH9Rg0vG2fia5op44yLQibF4KRNku cINj+551SjPPgPmAh9vWkzf3pf4xPfhtACnxfNnKeWjSQjmZrQO87A132uNqRPgWtTUI3VCxCsDn Nl8t0r6ma12VXaSOwk4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-65.akam.net is authoritative for HSR.GOV
	Found RRSIG signed by hsr.gov zone
	Query to a7-67.akam.net for HSR.GOV/SOA
	Received 558 bytes from 23.61.199.67
	;; Response received from [23.61.199.67] 558 octets ;; HEADER SECTION ;; id = 11218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN SOA ;; ANSWER SECTION (2 records) HSR.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018032910 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) HSR.GOV. 300 IN RRSIG ( SOA 8 2 300 20260424080118 20260421070118 9348 hsr.gov. iLEgpzClSyBSZtluJt2Pz+vsYJJgvG8DiKDbi2HHNZFpILrDM8XSsy6tWaS023A0Qc6kMduuHJ02 vgZb7fNAYcCG0dmqJV2+J90Syy9jd4gZaPUmt0k0qDr55Q1kAd7KziZo5Ipgtf9GVn0H8/aFDTk2 BGSMFAAAi05NwTaJbE8= ) ;; AUTHORITY SECTION (7 records) HSR.GOV. 300 IN NS a3-65.akam.net. HSR.GOV. 300 IN NS a7-67.akam.net. HSR.GOV. 300 IN NS a6-66.akam.net. HSR.GOV. 300 IN NS a1-252.akam.net. HSR.GOV. 300 IN NS a24-67.akam.net. HSR.GOV. 300 IN NS a26-64.akam.net. HSR.GOV. 300 IN RRSIG ( NS 8 2 300 20260424080118 20260421070118 9348 hsr.gov. uJhOca+GpcvQXfENwTt4gyMKCM2rEsV8St7R/KZE98TW8VzYd4bYpihR4CpImMk/K8oRXwSl4jva d2r9lEwlfuCzAeEJSAxuWxbSe5Ck3H2Du8axLzfNY3/r/orsr2snXk3QEgtKfSmSTPZz2e4p3rHt rMDiKKOumtAFOBKloEM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a6-66.akam.net for HSR.GOV/SOA
	Received 558 bytes from 23.211.133.66
	;; Response received from [23.211.133.66] 558 octets ;; HEADER SECTION ;; id = 50042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN SOA ;; ANSWER SECTION (2 records) HSR.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018032910 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) HSR.GOV. 300 IN RRSIG ( SOA 8 2 300 20260424080118 20260421070118 9348 hsr.gov. iLEgpzClSyBSZtluJt2Pz+vsYJJgvG8DiKDbi2HHNZFpILrDM8XSsy6tWaS023A0Qc6kMduuHJ02 vgZb7fNAYcCG0dmqJV2+J90Syy9jd4gZaPUmt0k0qDr55Q1kAd7KziZo5Ipgtf9GVn0H8/aFDTk2 BGSMFAAAi05NwTaJbE8= ) ;; AUTHORITY SECTION (7 records) HSR.GOV. 300 IN NS a26-64.akam.net. HSR.GOV. 300 IN NS a6-66.akam.net. HSR.GOV. 300 IN NS a7-67.akam.net. HSR.GOV. 300 IN NS a24-67.akam.net. HSR.GOV. 300 IN NS a1-252.akam.net. HSR.GOV. 300 IN NS a3-65.akam.net. HSR.GOV. 300 IN RRSIG ( NS 8 2 300 20260424080118 20260421070118 9348 hsr.gov. uJhOca+GpcvQXfENwTt4gyMKCM2rEsV8St7R/KZE98TW8VzYd4bYpihR4CpImMk/K8oRXwSl4jva d2r9lEwlfuCzAeEJSAxuWxbSe5Ck3H2Du8axLzfNY3/r/orsr2snXk3QEgtKfSmSTPZz2e4p3rHt rMDiKKOumtAFOBKloEM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a26-64.akam.net for HSR.GOV/SOA
	Received 558 bytes from 23.74.25.64
	;; Response received from [23.74.25.64] 558 octets ;; HEADER SECTION ;; id = 50403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN SOA ;; ANSWER SECTION (2 records) HSR.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018032910 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) HSR.GOV. 300 IN RRSIG ( SOA 8 2 300 20260424080118 20260421070118 9348 hsr.gov. iLEgpzClSyBSZtluJt2Pz+vsYJJgvG8DiKDbi2HHNZFpILrDM8XSsy6tWaS023A0Qc6kMduuHJ02 vgZb7fNAYcCG0dmqJV2+J90Syy9jd4gZaPUmt0k0qDr55Q1kAd7KziZo5Ipgtf9GVn0H8/aFDTk2 BGSMFAAAi05NwTaJbE8= ) ;; AUTHORITY SECTION (7 records) HSR.GOV. 300 IN NS a7-67.akam.net. HSR.GOV. 300 IN NS a24-67.akam.net. HSR.GOV. 300 IN NS a6-66.akam.net. HSR.GOV. 300 IN NS a3-65.akam.net. HSR.GOV. 300 IN NS a1-252.akam.net. HSR.GOV. 300 IN NS a26-64.akam.net. HSR.GOV. 300 IN RRSIG ( NS 8 2 300 20260424080118 20260421070118 9348 hsr.gov. uJhOca+GpcvQXfENwTt4gyMKCM2rEsV8St7R/KZE98TW8VzYd4bYpihR4CpImMk/K8oRXwSl4jva d2r9lEwlfuCzAeEJSAxuWxbSe5Ck3H2Du8axLzfNY3/r/orsr2snXk3QEgtKfSmSTPZz2e4p3rHt rMDiKKOumtAFOBKloEM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-252.akam.net for HSR.GOV/SOA
	Received 558 bytes from 193.108.91.252
	;; Response received from [193.108.91.252] 558 octets ;; HEADER SECTION ;; id = 62368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN SOA ;; ANSWER SECTION (2 records) HSR.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018032910 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) HSR.GOV. 300 IN RRSIG ( SOA 8 2 300 20260424080118 20260421070118 9348 hsr.gov. iLEgpzClSyBSZtluJt2Pz+vsYJJgvG8DiKDbi2HHNZFpILrDM8XSsy6tWaS023A0Qc6kMduuHJ02 vgZb7fNAYcCG0dmqJV2+J90Syy9jd4gZaPUmt0k0qDr55Q1kAd7KziZo5Ipgtf9GVn0H8/aFDTk2 BGSMFAAAi05NwTaJbE8= ) ;; AUTHORITY SECTION (7 records) HSR.GOV. 300 IN NS a1-252.akam.net. HSR.GOV. 300 IN NS a6-66.akam.net. HSR.GOV. 300 IN NS a24-67.akam.net. HSR.GOV. 300 IN NS a26-64.akam.net. HSR.GOV. 300 IN NS a3-65.akam.net. HSR.GOV. 300 IN NS a7-67.akam.net. HSR.GOV. 300 IN RRSIG ( NS 8 2 300 20260424080118 20260421070118 9348 hsr.gov. uJhOca+GpcvQXfENwTt4gyMKCM2rEsV8St7R/KZE98TW8VzYd4bYpihR4CpImMk/K8oRXwSl4jva d2r9lEwlfuCzAeEJSAxuWxbSe5Ck3H2Du8axLzfNY3/r/orsr2snXk3QEgtKfSmSTPZz2e4p3rHt rMDiKKOumtAFOBKloEM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a24-67.akam.net for HSR.GOV/SOA
	Received 558 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 558 octets ;; HEADER SECTION ;; id = 8932 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN SOA ;; ANSWER SECTION (2 records) HSR.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018032910 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) HSR.GOV. 300 IN RRSIG ( SOA 8 2 300 20260424080118 20260421070118 9348 hsr.gov. iLEgpzClSyBSZtluJt2Pz+vsYJJgvG8DiKDbi2HHNZFpILrDM8XSsy6tWaS023A0Qc6kMduuHJ02 vgZb7fNAYcCG0dmqJV2+J90Syy9jd4gZaPUmt0k0qDr55Q1kAd7KziZo5Ipgtf9GVn0H8/aFDTk2 BGSMFAAAi05NwTaJbE8= ) ;; AUTHORITY SECTION (7 records) HSR.GOV. 300 IN NS a24-67.akam.net. HSR.GOV. 300 IN NS a3-65.akam.net. HSR.GOV. 300 IN NS a6-66.akam.net. HSR.GOV. 300 IN NS a1-252.akam.net. HSR.GOV. 300 IN NS a7-67.akam.net. HSR.GOV. 300 IN NS a26-64.akam.net. HSR.GOV. 300 IN RRSIG ( NS 8 2 300 20260424080118 20260421070118 9348 hsr.gov. uJhOca+GpcvQXfENwTt4gyMKCM2rEsV8St7R/KZE98TW8VzYd4bYpihR4CpImMk/K8oRXwSl4jva d2r9lEwlfuCzAeEJSAxuWxbSe5Ck3H2Du8axLzfNY3/r/orsr2snXk3QEgtKfSmSTPZz2e4p3rHt rMDiKKOumtAFOBKloEM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a3-65.akam.net for HSR.GOV/A
	HSR.GOV A RR has value 23.4.76.238
	Found 1 RRSIGs over A RRset
	`HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. y/H5T3waM+rlEvTm/kEd4NgCDL8ZlwUNtV36pow9dXfmWYAdH9Rg0vG2fia5op44yLQibF4KRNku cINj+551SjPPgPmAh9vWkzf3pf4xPfhtACnxfNnKeWjSQjmZrQO87A132uNqRPgWtTUI3VCxCsDn Nl8t0r6ma12VXaSOwk4= )`
	RRSIG=9348 and DNSKEY=9348 verifies the A RRset

HSR.GOV

	Query to a7-67.akam.net for HSR.GOV/A
	Received 219 bytes from 23.61.199.67
	;; Response received from [23.61.199.67] 219 octets ;; HEADER SECTION ;; id = 47843 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN A ;; ANSWER SECTION (2 records) HSR.GOV. 20 IN A 104.86.82.19 HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. FuZZGqha2LF1FVB7SGtavYtPZ7oVi+TV6CiB7y/ByBEjetIZTBzOV6hej654aYCHuXtBBnbpaIax m/ky0uVuw13o/avbmDX+FiIBqFwyRVSlR7ccD7a9r1NuDYL7IEHgoCRCxHEpx+/2nxAkxKjKSGnz AB/xZhEn19rVAzcyy2I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a7-67.akam.net is authoritative for HSR.GOV
	Found RRSIG signed by hsr.gov zone
	Query to a7-67.akam.net for HSR.GOV/A
	HSR.GOV A RR has value 104.86.82.19
	Found 1 RRSIGs over A RRset
	`HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. FuZZGqha2LF1FVB7SGtavYtPZ7oVi+TV6CiB7y/ByBEjetIZTBzOV6hej654aYCHuXtBBnbpaIax m/ky0uVuw13o/avbmDX+FiIBqFwyRVSlR7ccD7a9r1NuDYL7IEHgoCRCxHEpx+/2nxAkxKjKSGnz AB/xZhEn19rVAzcyy2I= )`
	RRSIG=9348 and DNSKEY=9348 verifies the A RRset

HSR.GOV

	Query to a1-252.akam.net for HSR.GOV/A
	Received 219 bytes from 193.108.91.252
	;; Response received from [193.108.91.252] 219 octets ;; HEADER SECTION ;; id = 30844 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN A ;; ANSWER SECTION (2 records) HSR.GOV. 20 IN A 104.86.82.19 HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. FuZZGqha2LF1FVB7SGtavYtPZ7oVi+TV6CiB7y/ByBEjetIZTBzOV6hej654aYCHuXtBBnbpaIax m/ky0uVuw13o/avbmDX+FiIBqFwyRVSlR7ccD7a9r1NuDYL7IEHgoCRCxHEpx+/2nxAkxKjKSGnz AB/xZhEn19rVAzcyy2I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-252.akam.net is authoritative for HSR.GOV
	Found RRSIG signed by hsr.gov zone
	Query to a1-252.akam.net for HSR.GOV/A
	HSR.GOV A RR has value 104.86.82.19
	Found 1 RRSIGs over A RRset
	`HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. FuZZGqha2LF1FVB7SGtavYtPZ7oVi+TV6CiB7y/ByBEjetIZTBzOV6hej654aYCHuXtBBnbpaIax m/ky0uVuw13o/avbmDX+FiIBqFwyRVSlR7ccD7a9r1NuDYL7IEHgoCRCxHEpx+/2nxAkxKjKSGnz AB/xZhEn19rVAzcyy2I= )`
	RRSIG=9348 and DNSKEY=9348 verifies the A RRset

HSR.GOV

	Query to a24-67.akam.net for HSR.GOV/A
	Received 219 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 219 octets ;; HEADER SECTION ;; id = 44152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN A ;; ANSWER SECTION (2 records) HSR.GOV. 20 IN A 23.201.188.216 HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. zd9HfMLDMpFfpVZNXEK7DnwUc0M+c4+kpAIi6hd5cKBnW/3ibiDAAaghwg4e+VIOxB2q1pQBuft0 B77KKxcg6+AA0ooKCep9g5WfGNTR0BZtzDP/kV7hP3hTgVRiAEVgQ+nZo0+WkatPMn96JmVUQ4ty 2LpHe3kjSO9qYOTdFjQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a24-67.akam.net is authoritative for HSR.GOV
	Found RRSIG signed by hsr.gov zone
	Query to a24-67.akam.net for HSR.GOV/A
	HSR.GOV A RR has value 23.201.188.216
	Found 1 RRSIGs over A RRset
	`HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. zd9HfMLDMpFfpVZNXEK7DnwUc0M+c4+kpAIi6hd5cKBnW/3ibiDAAaghwg4e+VIOxB2q1pQBuft0 B77KKxcg6+AA0ooKCep9g5WfGNTR0BZtzDP/kV7hP3hTgVRiAEVgQ+nZo0+WkatPMn96JmVUQ4ty 2LpHe3kjSO9qYOTdFjQ= )`
	RRSIG=9348 and DNSKEY=9348 verifies the A RRset

HSR.GOV

	Query to a26-64.akam.net for HSR.GOV/A
	Received 219 bytes from 23.74.25.64
	;; Response received from [23.74.25.64] 219 octets ;; HEADER SECTION ;; id = 4119 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN A ;; ANSWER SECTION (2 records) HSR.GOV. 20 IN A 69.192.25.103 HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. wqFOBTFVfGW0Z4Gq4mg6vdeB9tF46xVFWf47jRAt4Cgdi2wz5UMl31ekMacFNW38IKTYnrgC6yt8 Nal9InGvcMBweNpsEQiUgPhLb/BVa3oMZunHwX5Z15c9fEqqmEzaNv2YdEL2FEhOHfdL/Oo1H9nf uoRKaKOCE4UPA2thkgc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a26-64.akam.net is authoritative for HSR.GOV
	Found RRSIG signed by hsr.gov zone
	Query to a26-64.akam.net for HSR.GOV/A
	HSR.GOV A RR has value 69.192.25.103
	Found 1 RRSIGs over A RRset
	`HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. wqFOBTFVfGW0Z4Gq4mg6vdeB9tF46xVFWf47jRAt4Cgdi2wz5UMl31ekMacFNW38IKTYnrgC6yt8 Nal9InGvcMBweNpsEQiUgPhLb/BVa3oMZunHwX5Z15c9fEqqmEzaNv2YdEL2FEhOHfdL/Oo1H9nf uoRKaKOCE4UPA2thkgc= )`
	RRSIG=9348 and DNSKEY=9348 verifies the A RRset

HSR.GOV

	Query to a6-66.akam.net for HSR.GOV/A
	Received 219 bytes from 23.211.133.66
	;; Response received from [23.211.133.66] 219 octets ;; HEADER SECTION ;; id = 52696 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; HSR.GOV. IN A ;; ANSWER SECTION (2 records) HSR.GOV. 20 IN A 23.201.188.216 HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. zd9HfMLDMpFfpVZNXEK7DnwUc0M+c4+kpAIi6hd5cKBnW/3ibiDAAaghwg4e+VIOxB2q1pQBuft0 B77KKxcg6+AA0ooKCep9g5WfGNTR0BZtzDP/kV7hP3hTgVRiAEVgQ+nZo0+WkatPMn96JmVUQ4ty 2LpHe3kjSO9qYOTdFjQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a6-66.akam.net is authoritative for HSR.GOV
	Found RRSIG signed by hsr.gov zone
	Query to a6-66.akam.net for HSR.GOV/A
	HSR.GOV A RR has value 23.201.188.216
	Found 1 RRSIGs over A RRset
	`HSR.GOV. 20 IN RRSIG ( A 8 2 20 20260424080118 20260421070118 9348 hsr.gov. zd9HfMLDMpFfpVZNXEK7DnwUc0M+c4+kpAIi6hd5cKBnW/3ibiDAAaghwg4e+VIOxB2q1pQBuft0 B77KKxcg6+AA0ooKCep9g5WfGNTR0BZtzDP/kV7hP3hTgVRiAEVgQ+nZo0+WkatPMn96JmVUQ4ty 2LpHe3kjSO9qYOTdFjQ= )`
	RRSIG=9348 and DNSKEY=9348 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test HSR.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: