DNSSEC Debugger

Domain Name:

Time: 2026-02-23 04:34:24 UTC

Analyzing DNSSEC problems for IBB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 61325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for IBB.GOV/A
	Received 614 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 614 octets ;; HEADER SECTION ;; id = 3285 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 610 octets ;; HEADER SECTION ;; id = 54809 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 4596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 63015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.GOV for IBB.GOV/A
	Received 358 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 358 octets ;; HEADER SECTION ;; id = 11643 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) IBB.GOV. 10800 IN NS eur6.akam.net. IBB.GOV. 10800 IN NS ns1-227.akam.net. IBB.GOV. 10800 IN NS ns1-63.akam.net. IBB.GOV. 10800 IN NS use5.akam.net. IBB.GOV. 10800 IN NS use9.akam.net. IBB.GOV. 10800 IN NS usw2.akam.net. IBB.GOV. 3600 IN DS ( 2628 7 2 cd08ddbc9ec83bcf5dec70f3b42077b45d757fc8345ffa0174130a8271de996a ) IBB.GOV. 3600 IN DS ( 46209 7 2 fa872bd08540207bea061c70d690a928b9eb940c40770db76b1375f70b69cc28 ) IBB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224053424 20260222033424 35496 gov. YtbnyYJG6a6NTmU0Vj6qS8GqyjQJeA9oi+9RIysnI1i9u/JJT8OhevB5+vLnIsslxigwEEss3VRE IeuqMLdmKg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.GOV for IBB.GOV/DNSKEY
	Received 358 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 358 octets ;; HEADER SECTION ;; id = 48620 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) IBB.GOV. 10800 IN NS eur6.akam.net. IBB.GOV. 10800 IN NS ns1-227.akam.net. IBB.GOV. 10800 IN NS ns1-63.akam.net. IBB.GOV. 10800 IN NS use5.akam.net. IBB.GOV. 10800 IN NS use9.akam.net. IBB.GOV. 10800 IN NS usw2.akam.net. IBB.GOV. 3600 IN DS ( 2628 7 2 cd08ddbc9ec83bcf5dec70f3b42077b45d757fc8345ffa0174130a8271de996a ) IBB.GOV. 3600 IN DS ( 46209 7 2 fa872bd08540207bea061c70d690a928b9eb940c40770db76b1375f70b69cc28 ) IBB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224053424 20260222033424 35496 gov. glzbJqu6iGz7sGfx6RmlD+fpFvs215jUqkPOfIqeTNzQUMMSNCHWHGMcaNR4OBxtIsARvCcTiTdO G9AuumqCpA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone IBB.GOV

IBB.GOV

	Checking DS between GOV and IBB.GOV
	Query to c.ns.GOV for IBB.GOV/DS
	Received 231 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 231 octets ;; HEADER SECTION ;; id = 20805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN DS ;; ANSWER SECTION (3 records) IBB.GOV. 3600 IN DS ( 2628 7 2 cd08ddbc9ec83bcf5dec70f3b42077b45d757fc8345ffa0174130a8271de996a ) IBB.GOV. 3600 IN DS ( 46209 7 2 fa872bd08540207bea061c70d690a928b9eb940c40770db76b1375f70b69cc28 ) IBB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224053424 20260222033424 35496 gov. 3Xd2Akj9AzTKibiTF6p1HaKqPRi83w1/sJpQkKHlXqZLIIafJlZxCLfiSmnlHwGPlR3DNXW/fZd4 /zaQECNMtA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for IBB.GOV in the GOV zone
	DS=2628/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=46209/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`IBB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224053424 20260222033424 35496 gov. 3Xd2Akj9AzTKibiTF6p1HaKqPRi83w1/sJpQkKHlXqZLIIafJlZxCLfiSmnlHwGPlR3DNXW/fZd4 /zaQECNMtA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=2628/SHA-256 is now in the chain-of-trust
	DS=46209/SHA-256 is now in the chain-of-trust
	`IBB.GOV. 3600 IN DS ( 2628 7 2 cd08ddbc9ec83bcf5dec70f3b42077b45d757fc8345ffa0174130a8271de996a )`
	`IBB.GOV. 3600 IN DS ( 46209 7 2 fa872bd08540207bea061c70d690a928b9eb940c40770db76b1375f70b69cc28 )`
	Query to eur6.akam.net for IBB.GOV/DNSKEY
	Received 1474 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 1474 octets ;; HEADER SECTION ;; id = 4026 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) IBB.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAb2a6Ib72aP+fqAmDfrOt1z+ihtO7d81Uoc1Ihcsbe1SUN8E8GqIiMmFFO7X/6Ix0YThJfk+ RHKgIJlyZns8MWRhT2ARd1FMTwZ4B7UEUDJvtB4kHmClT21yb6tKmRCgrq+3YymXYJ9T5MT2LgQG b3xrXiiapYHfu9rGRgSGQVCF ) ; keytag 32864 IBB.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAc966VZUdNrtExL7edfj1Waghjq9kdoDP2EYsglWGPjg8LW2/dSa2uiy7jZV9zOZzSq3JqNy 4bbHYi+6WPDR5ISks3H/LYyb/OQKTt4iVgxQX+jPPQPTx7H7jcgZrfSfl4ZbSchT9tnmjptCuNqq goPy/TO45bxcMRWX9lVIIjZkITe8JQ8y/ViJ/g56OjoQCorbKPJjuu2GuSCj/BaNyHmlXqZElF7s nhILSwy/aZmNdfF6svpQcWSB6FCeTUNSPbTp2gyLIdqp9n3tB3OnLQEZmPda80yuKdTfLVNw+d3y f6/34+HSm5AL2k1aYcRUlbtI2en5raef/AdTySBRphs= ) ; keytag 21975 IBB.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAcDp0RZEiaQJlvODKDJ6qqlauXUxYF8y0YX6qYRn+OnlcvZ2JqY0sJ/gkvTRlsdXUSUzt2fc 42CIze0mcD443kSVQAe+gmhdmFCpTnu9C0kKJ876ZE9Gva0iaHQSk/t4kzF4R3lWlqFUvFJoJo9G T22/xlTcbpxWYd30bSPX7a/lXA3SrmXp/UK1nrKFYQoJm8T4+H6po/SXGyzfRlS2s2nGmZEE0YvI NqhstMhjFZqXyQX9YXNQpVBXYOrC7t58G+5LwboiPZy2aqSRtwKDYU6q6zUYx/qp8ImTUOUnGbhR rGb+KqxvxCjv4FPwQhbN61vH2i8hN9qG+5MdHNEnaLM= ) ; keytag 2628 IBB.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAe+fGXrYtPBtQgQPLLxm+Fr5T3vcOHvpziw13v/g02g9M7EpkwbFA6RwXGxVsK7U98nCN0uz T0zvNc+p+bZv2PUioHdjZQ2+TqGsu2fdR8ENJyGDmFnj9ZtPt9cftleWnLewnEUGwXJnEb14Xufj LH4bS8YdX9pNFyyNN4lIyYUX ) ; keytag 22578 IBB.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20260225063948 20260222053948 2628 ibb.gov. JeAFnPLmzDpYDLHIEdlfBphJ2POVfQpCyjFGzNqRNOxPaFazMq8yN0Lp3HOyn+f1ELQ6pR3NUUSl yNTOOfHLxBx7p6eQjtI8WGO24J2b0FYwnxVIYhswiYSwAPZ/vKeNUMhvoTD7XwG854AW1JEzkeFV NQekFYskX8nEeG3u0hdrh1GpcJaAqNUBEHG+EBvLoqPPiU9AH0Nux+bX4A+OCFkr5i378dySXlsX +Er9ElSlGM4NMWmNschJ7NNwLw7NFfOiJogETwKteSFVrowWL3Bdbvh0PlewZLC6Ia3smnDGREdy jkjU/kDXOptkovWqon2b7QJGsZIPzNWzq5InIA== ) IBB.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20260225063948 20260222053948 21975 ibb.gov. PI3g+aaSqA30hG63m5aTvzFYJ8mmQobcwpIH525YCi+nNHGLFc9aadh4W1oAm+5gNExWnb3m3omf PyObA1NHJIism8h6iRcVRTIe+jwSIUpqPY596jNrmIeNNzhFem4KB81WgV0n+/4z/V1JG6IC6NGX up93YbefcH3I+DmDwWfiP8n+99wsnnL61h1Wkq5tfpgSPGf1EuGGKMXXxQDnE+DmpVbbymUoMf3Y Qe4T2tF6yDcsDtbIEkrXBdwjVTW9dQtI1w51U3KGnOUDtSbjyifhi2RFlnhXnUKiMEHqx7FbHdnF FD/CobMkATjU75XRkLWz4U12GX0l8aHILjhOLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for IBB.GOV
	`IBB.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAb2a6Ib72aP+fqAmDfrOt1z+ihtO7d81Uoc1Ihcsbe1SUN8E8GqIiMmFFO7X/6Ix0YThJfk+ RHKgIJlyZns8MWRhT2ARd1FMTwZ4B7UEUDJvtB4kHmClT21yb6tKmRCgrq+3YymXYJ9T5MT2LgQG b3xrXiiapYHfu9rGRgSGQVCF ) ; keytag 32864`
	`IBB.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAc966VZUdNrtExL7edfj1Waghjq9kdoDP2EYsglWGPjg8LW2/dSa2uiy7jZV9zOZzSq3JqNy 4bbHYi+6WPDR5ISks3H/LYyb/OQKTt4iVgxQX+jPPQPTx7H7jcgZrfSfl4ZbSchT9tnmjptCuNqq goPy/TO45bxcMRWX9lVIIjZkITe8JQ8y/ViJ/g56OjoQCorbKPJjuu2GuSCj/BaNyHmlXqZElF7s nhILSwy/aZmNdfF6svpQcWSB6FCeTUNSPbTp2gyLIdqp9n3tB3OnLQEZmPda80yuKdTfLVNw+d3y f6/34+HSm5AL2k1aYcRUlbtI2en5raef/AdTySBRphs= ) ; keytag 21975`
	`IBB.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAcDp0RZEiaQJlvODKDJ6qqlauXUxYF8y0YX6qYRn+OnlcvZ2JqY0sJ/gkvTRlsdXUSUzt2fc 42CIze0mcD443kSVQAe+gmhdmFCpTnu9C0kKJ876ZE9Gva0iaHQSk/t4kzF4R3lWlqFUvFJoJo9G T22/xlTcbpxWYd30bSPX7a/lXA3SrmXp/UK1nrKFYQoJm8T4+H6po/SXGyzfRlS2s2nGmZEE0YvI NqhstMhjFZqXyQX9YXNQpVBXYOrC7t58G+5LwboiPZy2aqSRtwKDYU6q6zUYx/qp8ImTUOUnGbhR rGb+KqxvxCjv4FPwQhbN61vH2i8hN9qG+5MdHNEnaLM= ) ; keytag 2628`
	`IBB.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAe+fGXrYtPBtQgQPLLxm+Fr5T3vcOHvpziw13v/g02g9M7EpkwbFA6RwXGxVsK7U98nCN0uz T0zvNc+p+bZv2PUioHdjZQ2+TqGsu2fdR8ENJyGDmFnj9ZtPt9cftleWnLewnEUGwXJnEb14Xufj LH4bS8YdX9pNFyyNN4lIyYUX ) ; keytag 22578`
	DNSKEY=2628/SEP is now in the chain-of-trust
	DS=2628/SHA-256 verifies DNSKEY=2628/SEP
	DS=46209/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`IBB.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20260225063948 20260222053948 2628 ibb.gov. JeAFnPLmzDpYDLHIEdlfBphJ2POVfQpCyjFGzNqRNOxPaFazMq8yN0Lp3HOyn+f1ELQ6pR3NUUSl yNTOOfHLxBx7p6eQjtI8WGO24J2b0FYwnxVIYhswiYSwAPZ/vKeNUMhvoTD7XwG854AW1JEzkeFV NQekFYskX8nEeG3u0hdrh1GpcJaAqNUBEHG+EBvLoqPPiU9AH0Nux+bX4A+OCFkr5i378dySXlsX +Er9ElSlGM4NMWmNschJ7NNwLw7NFfOiJogETwKteSFVrowWL3Bdbvh0PlewZLC6Ia3smnDGREdy jkjU/kDXOptkovWqon2b7QJGsZIPzNWzq5InIA== )`
	`IBB.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20260225063948 20260222053948 21975 ibb.gov. PI3g+aaSqA30hG63m5aTvzFYJ8mmQobcwpIH525YCi+nNHGLFc9aadh4W1oAm+5gNExWnb3m3omf PyObA1NHJIism8h6iRcVRTIe+jwSIUpqPY596jNrmIeNNzhFem4KB81WgV0n+/4z/V1JG6IC6NGX up93YbefcH3I+DmDwWfiP8n+99wsnnL61h1Wkq5tfpgSPGf1EuGGKMXXxQDnE+DmpVbbymUoMf3Y Qe4T2tF6yDcsDtbIEkrXBdwjVTW9dQtI1w51U3KGnOUDtSbjyifhi2RFlnhXnUKiMEHqx7FbHdnF FD/CobMkATjU75XRkLWz4U12GX0l8aHILjhOLQ== )`
	RRSIG=2628 and DNSKEY=2628/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=21975 and DNSKEY=21975/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 2 RRSIG and 4 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to ns1-63.akam.net for IBB.GOV/A
	Received 219 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 219 octets ;; HEADER SECTION ;; id = 63733 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-63.akam.net is authoritative for IBB.GOV
	Found RRSIG signed by ibb.gov zone
	Query to use5.akam.net for IBB.GOV/SOA
	Received 544 bytes from 2.16.40.64
	;; Response received from [2.16.40.64] 544 octets ;; HEADER SECTION ;; id = 3890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN SOA ;; ANSWER SECTION (2 records) IBB.GOV. 86400 IN SOA ( use5.akam.net. postmaster.IBB.GOV. 1541801803 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 900 ;minimum ) IBB.GOV. 86400 IN RRSIG ( SOA 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. LMxQpcV8ERUUCkY+GR9FmiDh3m6RCU6ZWCZNoxPkd2utO7Qbv/cSWsW2NQRUlCK75Ch37RiEP0uM wwTM1+MDn9fWIRfmo2+gc/xyEITSVLemXUqdPCrtaw8X5+LgW2dUeepV81mHEuCfnoww+xJt40Al CFu0Omb2MfximHeiDTg= ) ;; AUTHORITY SECTION (7 records) IBB.GOV. 86400 IN NS ns1-63.akam.net. IBB.GOV. 86400 IN NS eur6.akam.net. IBB.GOV. 86400 IN NS use9.akam.net. IBB.GOV. 86400 IN NS use5.akam.net. IBB.GOV. 86400 IN NS ns1-227.akam.net. IBB.GOV. 86400 IN NS usw2.akam.net. IBB.GOV. 86400 IN RRSIG ( NS 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. ENLR3e+4NJS6ZRDZVp2qmtvyLgH/JDA5GwWl6Dp9SHltBFhlanSKbIlut1yInPunSFu70wQRgm/G OMfq6IOlzScaHSZ22RVWDsvLME8ZyAs9MOmjlb/2MmM4LNc1HaDOuagfGYGlHIHkYAGzcXNpUc9x Nd9rhlmfkn0xjQWbZoI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-227.akam.net for IBB.GOV/SOA
	Received 544 bytes from 193.108.91.227
	;; Response received from [193.108.91.227] 544 octets ;; HEADER SECTION ;; id = 4910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN SOA ;; ANSWER SECTION (2 records) IBB.GOV. 86400 IN SOA ( use5.akam.net. postmaster.IBB.GOV. 1541801803 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 900 ;minimum ) IBB.GOV. 86400 IN RRSIG ( SOA 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. LMxQpcV8ERUUCkY+GR9FmiDh3m6RCU6ZWCZNoxPkd2utO7Qbv/cSWsW2NQRUlCK75Ch37RiEP0uM wwTM1+MDn9fWIRfmo2+gc/xyEITSVLemXUqdPCrtaw8X5+LgW2dUeepV81mHEuCfnoww+xJt40Al CFu0Omb2MfximHeiDTg= ) ;; AUTHORITY SECTION (7 records) IBB.GOV. 86400 IN NS use9.akam.net. IBB.GOV. 86400 IN NS usw2.akam.net. IBB.GOV. 86400 IN NS ns1-63.akam.net. IBB.GOV. 86400 IN NS eur6.akam.net. IBB.GOV. 86400 IN NS ns1-227.akam.net. IBB.GOV. 86400 IN NS use5.akam.net. IBB.GOV. 86400 IN RRSIG ( NS 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. ENLR3e+4NJS6ZRDZVp2qmtvyLgH/JDA5GwWl6Dp9SHltBFhlanSKbIlut1yInPunSFu70wQRgm/G OMfq6IOlzScaHSZ22RVWDsvLME8ZyAs9MOmjlb/2MmM4LNc1HaDOuagfGYGlHIHkYAGzcXNpUc9x Nd9rhlmfkn0xjQWbZoI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usw2.akam.net for IBB.GOV/SOA
	Received 544 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 544 octets ;; HEADER SECTION ;; id = 37536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN SOA ;; ANSWER SECTION (2 records) IBB.GOV. 86400 IN SOA ( use5.akam.net. postmaster.IBB.GOV. 1541801803 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 900 ;minimum ) IBB.GOV. 86400 IN RRSIG ( SOA 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. LMxQpcV8ERUUCkY+GR9FmiDh3m6RCU6ZWCZNoxPkd2utO7Qbv/cSWsW2NQRUlCK75Ch37RiEP0uM wwTM1+MDn9fWIRfmo2+gc/xyEITSVLemXUqdPCrtaw8X5+LgW2dUeepV81mHEuCfnoww+xJt40Al CFu0Omb2MfximHeiDTg= ) ;; AUTHORITY SECTION (7 records) IBB.GOV. 86400 IN NS use9.akam.net. IBB.GOV. 86400 IN NS usw2.akam.net. IBB.GOV. 86400 IN NS eur6.akam.net. IBB.GOV. 86400 IN NS ns1-63.akam.net. IBB.GOV. 86400 IN NS use5.akam.net. IBB.GOV. 86400 IN NS ns1-227.akam.net. IBB.GOV. 86400 IN RRSIG ( NS 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. ENLR3e+4NJS6ZRDZVp2qmtvyLgH/JDA5GwWl6Dp9SHltBFhlanSKbIlut1yInPunSFu70wQRgm/G OMfq6IOlzScaHSZ22RVWDsvLME8ZyAs9MOmjlb/2MmM4LNc1HaDOuagfGYGlHIHkYAGzcXNpUc9x Nd9rhlmfkn0xjQWbZoI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to eur6.akam.net for IBB.GOV/SOA
	Received 544 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 544 octets ;; HEADER SECTION ;; id = 14875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN SOA ;; ANSWER SECTION (2 records) IBB.GOV. 86400 IN SOA ( use5.akam.net. postmaster.IBB.GOV. 1541801803 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 900 ;minimum ) IBB.GOV. 86400 IN RRSIG ( SOA 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. LMxQpcV8ERUUCkY+GR9FmiDh3m6RCU6ZWCZNoxPkd2utO7Qbv/cSWsW2NQRUlCK75Ch37RiEP0uM wwTM1+MDn9fWIRfmo2+gc/xyEITSVLemXUqdPCrtaw8X5+LgW2dUeepV81mHEuCfnoww+xJt40Al CFu0Omb2MfximHeiDTg= ) ;; AUTHORITY SECTION (7 records) IBB.GOV. 86400 IN NS ns1-63.akam.net. IBB.GOV. 86400 IN NS use9.akam.net. IBB.GOV. 86400 IN NS usw2.akam.net. IBB.GOV. 86400 IN NS eur6.akam.net. IBB.GOV. 86400 IN NS use5.akam.net. IBB.GOV. 86400 IN NS ns1-227.akam.net. IBB.GOV. 86400 IN RRSIG ( NS 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. ENLR3e+4NJS6ZRDZVp2qmtvyLgH/JDA5GwWl6Dp9SHltBFhlanSKbIlut1yInPunSFu70wQRgm/G OMfq6IOlzScaHSZ22RVWDsvLME8ZyAs9MOmjlb/2MmM4LNc1HaDOuagfGYGlHIHkYAGzcXNpUc9x Nd9rhlmfkn0xjQWbZoI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use9.akam.net for IBB.GOV/SOA
	Received 544 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 544 octets ;; HEADER SECTION ;; id = 45059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN SOA ;; ANSWER SECTION (2 records) IBB.GOV. 86400 IN SOA ( use5.akam.net. postmaster.IBB.GOV. 1541801803 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 900 ;minimum ) IBB.GOV. 86400 IN RRSIG ( SOA 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. LMxQpcV8ERUUCkY+GR9FmiDh3m6RCU6ZWCZNoxPkd2utO7Qbv/cSWsW2NQRUlCK75Ch37RiEP0uM wwTM1+MDn9fWIRfmo2+gc/xyEITSVLemXUqdPCrtaw8X5+LgW2dUeepV81mHEuCfnoww+xJt40Al CFu0Omb2MfximHeiDTg= ) ;; AUTHORITY SECTION (7 records) IBB.GOV. 86400 IN NS use9.akam.net. IBB.GOV. 86400 IN NS usw2.akam.net. IBB.GOV. 86400 IN NS use5.akam.net. IBB.GOV. 86400 IN NS eur6.akam.net. IBB.GOV. 86400 IN NS ns1-227.akam.net. IBB.GOV. 86400 IN NS ns1-63.akam.net. IBB.GOV. 86400 IN RRSIG ( NS 7 2 86400 20260225063948 20260222053948 32864 ibb.gov. ENLR3e+4NJS6ZRDZVp2qmtvyLgH/JDA5GwWl6Dp9SHltBFhlanSKbIlut1yInPunSFu70wQRgm/G OMfq6IOlzScaHSZ22RVWDsvLME8ZyAs9MOmjlb/2MmM4LNc1HaDOuagfGYGlHIHkYAGzcXNpUc9x Nd9rhlmfkn0xjQWbZoI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-63.akam.net for IBB.GOV/A
	Received 219 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 219 octets ;; HEADER SECTION ;; id = 47026 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	IBB.GOV A RR has value 23.52.199.100
	Found 1 RRSIGs over A RRset
	`IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= )`
	RRSIG=32864 and DNSKEY=32864 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

IBB.GOV

	Query to usw2.akam.net for IBB.GOV/A
	Received 219 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 219 octets ;; HEADER SECTION ;; id = 1767 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usw2.akam.net is authoritative for IBB.GOV
	Found RRSIG signed by ibb.gov zone
	Query to usw2.akam.net for IBB.GOV/A
	Received 219 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 219 octets ;; HEADER SECTION ;; id = 49897 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	IBB.GOV A RR has value 23.52.199.100
	Found 1 RRSIGs over A RRset
	`IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= )`
	RRSIG=32864 and DNSKEY=32864 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

IBB.GOV

	Query to eur6.akam.net for IBB.GOV/A
	Received 219 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 219 octets ;; HEADER SECTION ;; id = 6560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	eur6.akam.net is authoritative for IBB.GOV
	Found RRSIG signed by ibb.gov zone
	Query to eur6.akam.net for IBB.GOV/A
	Received 219 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 219 octets ;; HEADER SECTION ;; id = 30070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	IBB.GOV A RR has value 23.52.199.100
	Found 1 RRSIGs over A RRset
	`IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= )`
	RRSIG=32864 and DNSKEY=32864 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

IBB.GOV

	Query to use9.akam.net for IBB.GOV/A
	Received 219 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 219 octets ;; HEADER SECTION ;; id = 39396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use9.akam.net is authoritative for IBB.GOV
	Found RRSIG signed by ibb.gov zone
	Query to use9.akam.net for IBB.GOV/A
	Received 219 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 219 octets ;; HEADER SECTION ;; id = 6249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	IBB.GOV A RR has value 23.52.199.100
	Found 1 RRSIGs over A RRset
	`IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= )`
	RRSIG=32864 and DNSKEY=32864 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

IBB.GOV

	Query to ns1-227.akam.net for IBB.GOV/A
	Received 219 bytes from 193.108.91.227
	;; Response received from [193.108.91.227] 219 octets ;; HEADER SECTION ;; id = 51693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-227.akam.net is authoritative for IBB.GOV
	Found RRSIG signed by ibb.gov zone
	Query to ns1-227.akam.net for IBB.GOV/A
	Received 219 bytes from 193.108.91.227
	;; Response received from [193.108.91.227] 219 octets ;; HEADER SECTION ;; id = 4198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	IBB.GOV A RR has value 23.52.199.100
	Found 1 RRSIGs over A RRset
	`IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= )`
	RRSIG=32864 and DNSKEY=32864 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

IBB.GOV

	Query to use5.akam.net for IBB.GOV/A
	Received 219 bytes from 2.16.40.64
	;; Response received from [2.16.40.64] 219 octets ;; HEADER SECTION ;; id = 1151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use5.akam.net is authoritative for IBB.GOV
	Found RRSIG signed by ibb.gov zone
	Query to use5.akam.net for IBB.GOV/A
	Received 219 bytes from 2.16.40.64
	;; Response received from [2.16.40.64] 219 octets ;; HEADER SECTION ;; id = 21847 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; IBB.GOV. IN A ;; ANSWER SECTION (2 records) IBB.GOV. 20 IN A 23.52.199.100 IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	IBB.GOV A RR has value 23.52.199.100
	Found 1 RRSIGs over A RRset
	`IBB.GOV. 20 IN RRSIG ( A 7 2 20 20260225063948 20260222053948 32864 ibb.gov. qs7c+7r1+BGSlkaNa2OOUN49uqQE3g/0kHzfYIE+3od27yDlGpbzTG6tkWUv728ovvMvmtmfgFyo PbS1X4X9iCcZL1vMVTMZg5emXdrUBfc+faCh4az6lSoNSuwT/sw7l3SdYZvmcCYdZRWlZVGtHWV8 dD+YhgzNj7yTslUzNeI= )`
	RRSIG=32864 and DNSKEY=32864 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test IBB.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: