DNSSEC Analyzer - LANL.GOV

Domain Name:

Time: 2021-04-22 10:13:02 UTC, NTP stratum 4

Analyzing DNSSEC problems for LANL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 42024 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to e.root-servers.net for LANL.GOV/A
	Received 627 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (627 bytes) ;; HEADER SECTION ;; id = 2086 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (625 bytes) ;; HEADER SECTION ;; id = 6343 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (367 bytes) ;; HEADER SECTION ;; id = 46738 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 2158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to d.gov-servers.net for LANL.GOV/A
	Received 446 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (446 bytes) ;; HEADER SECTION ;; id = 47647 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) LANL.GOV. 86400 IN NS adns2.es.net. LANL.GOV. 86400 IN NS adns1.es.net. LANL.GOV. 3600 IN DS ( 41410 8 2 1634ed184fd11b58e19d4a14f0f939beb76e7090c9eca9a83f7b482f2fd77885 ) LANL.GOV. 3600 IN DS 41410 8 1 6ff34ff18f6f358211b29c0187c5daf427974357 LANL.GOV. 3600 IN DS 11749 8 1 480fed0935216c5d12eff709c12814eb4d889a99 LANL.GOV. 3600 IN DS ( 11749 8 2 d3fde837285900bc013fd8fc7eb7243b8768c26863fcaf5b536a4d3fefd4e70e ) LANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. MbDshHFvmXbdz5tTVYoicU942WSYILTvYvQjs4+hn44pFgGuR6Uk7h2dW5v4Gn0sIdsclhhj35t5 DQPkmpB8GOLYbmTEbigU8ZDUj3YSpPTqKEWJFbAWbr/WfcKV5yeMaMYcCpb4DD96YHlVgItKIr/J 2a6Fo/fY/Z2wADmGSyMjNA2vrpTc8/MFph7o8+8JjIcXy2sPVgTxSji0VIJYgw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for LANL.GOV/DNSKEY
	Received 446 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (446 bytes) ;; HEADER SECTION ;; id = 29623 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) LANL.GOV. 86400 IN NS adns2.es.net. LANL.GOV. 86400 IN NS adns1.es.net. LANL.GOV. 3600 IN DS ( 41410 8 2 1634ed184fd11b58e19d4a14f0f939beb76e7090c9eca9a83f7b482f2fd77885 ) LANL.GOV. 3600 IN DS 41410 8 1 6ff34ff18f6f358211b29c0187c5daf427974357 LANL.GOV. 3600 IN DS 11749 8 1 480fed0935216c5d12eff709c12814eb4d889a99 LANL.GOV. 3600 IN DS ( 11749 8 2 d3fde837285900bc013fd8fc7eb7243b8768c26863fcaf5b536a4d3fefd4e70e ) LANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. MbDshHFvmXbdz5tTVYoicU942WSYILTvYvQjs4+hn44pFgGuR6Uk7h2dW5v4Gn0sIdsclhhj35t5 DQPkmpB8GOLYbmTEbigU8ZDUj3YSpPTqKEWJFbAWbr/WfcKV5yeMaMYcCpb4DD96YHlVgItKIr/J 2a6Fo/fY/Z2wADmGSyMjNA2vrpTc8/MFph7o8+8JjIcXy2sPVgTxSji0VIJYgw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone LANL.GOV

LANL.GOV

	Checking DS between GOV and LANL.GOV
	Query to b.gov-servers.net for LANL.GOV/DS
	Received 400 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (400 bytes) ;; HEADER SECTION ;; id = 48747 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN DS ;; ANSWER SECTION (5 records) LANL.GOV. 3600 IN DS ( 41410 8 2 1634ed184fd11b58e19d4a14f0f939beb76e7090c9eca9a83f7b482f2fd77885 ) LANL.GOV. 3600 IN DS 41410 8 1 6ff34ff18f6f358211b29c0187c5daf427974357 LANL.GOV. 3600 IN DS 11749 8 1 480fed0935216c5d12eff709c12814eb4d889a99 LANL.GOV. 3600 IN DS ( 11749 8 2 d3fde837285900bc013fd8fc7eb7243b8768c26863fcaf5b536a4d3fefd4e70e ) LANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. MbDshHFvmXbdz5tTVYoicU942WSYILTvYvQjs4+hn44pFgGuR6Uk7h2dW5v4Gn0sIdsclhhj35t5 DQPkmpB8GOLYbmTEbigU8ZDUj3YSpPTqKEWJFbAWbr/WfcKV5yeMaMYcCpb4DD96YHlVgItKIr/J 2a6Fo/fY/Z2wADmGSyMjNA2vrpTc8/MFph7o8+8JjIcXy2sPVgTxSji0VIJYgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for LANL.GOV in the GOV zone
	DS=41410/SHA-256 has algorithm RSASHA256
	DS=41410/SHA-1 has algorithm RSASHA256
	DS=11749/SHA-1 has algorithm RSASHA256
	DS=11749/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`LANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. MbDshHFvmXbdz5tTVYoicU942WSYILTvYvQjs4+hn44pFgGuR6Uk7h2dW5v4Gn0sIdsclhhj35t5 DQPkmpB8GOLYbmTEbigU8ZDUj3YSpPTqKEWJFbAWbr/WfcKV5yeMaMYcCpb4DD96YHlVgItKIr/J 2a6Fo/fY/Z2wADmGSyMjNA2vrpTc8/MFph7o8+8JjIcXy2sPVgTxSji0VIJYgw== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=41410/SHA-256 is now in the chain-of-trust
	DS=11749/SHA-1 is now in the chain-of-trust
	`LANL.GOV. 3600 IN DS ( 41410 8 2 1634ed184fd11b58e19d4a14f0f939beb76e7090c9eca9a83f7b482f2fd77885 )`
	`LANL.GOV. 3600 IN DS 41410 8 1 6ff34ff18f6f358211b29c0187c5daf427974357`
	`LANL.GOV. 3600 IN DS 11749 8 1 480fed0935216c5d12eff709c12814eb4d889a99`
	`LANL.GOV. 3600 IN DS ( 11749 8 2 d3fde837285900bc013fd8fc7eb7243b8768c26863fcaf5b536a4d3fefd4e70e )`
	Query to adns1.es.net for LANL.GOV/DNSKEY
	Received 1821 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (1821 bytes) ;; HEADER SECTION ;; id = 22562 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) lanl.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAaXjBWIabv4Yngj0kzwu0XVIPrDYZCOHZWapvrw5KygLaFsWhyLYC5gev/9HUCajWX12Iy8I xrwOuYxD/+va0g24CZmZdHOHGEc+ZR2lUQxx/ApFYIR2RXnRtPpUXB66iM2hnky0kEBPia3OzkXW 4IimyrKsfNcKBWnq6eSwiGP2pK2acSaCPZizbTSZC5h0VeWDnZLkYUhEc02xiNvahOn4yPLyTT9b l16bYWWCscTdFlFPh+Mu7DJ89ilPt6BNd8kZqGVhxP98TGXktZ/RRZftkjSMXPOWo4MWKjmWJ7Xu BX13AtpvkFQXaUeU3fJuugIFLldencaQQRv6+oF0Wn0= ) ; Key ID = 11749 lanl.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAdyHy6a8TdTSMCaVQUTJxhm1PLOTXeTIyHpBwVsBGCP2oNXwW2onr4m06+/AxbIm3Q94Oy5h /HkGBS/3/8Muw6YgxoEdAYEmbfjOqWQ0yfZKiFw1ZPSZDsHXxgku9oCoOXQNpZauG8YZk/lsmSG2 v2BZEDPacKjti7T2tCabE5y8f+eSeOKRH1ASItusCAqPcgnzNIGiRJ20Dk1IMXEnfbmmjLXdsHXO p+bLt0+m88/gArDkj07i3pnweZ8nCbfJynzqHpArEK2d5o+2rW1XJo6bDUhcjgX5x+Cz+06IV81G QLRhRPvWou0kiKu3+C6v5Z+T3qycPWYiB5jEmpI4R78= ) ; Key ID = 41410 lanl.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAckWO4pi92wZlTo2rYyvn8NKB/xqpWl8Pj8+Qmz1qYFtF2VLxfmIRXDsXnmlLsEI+WwO9YQV 4SiO2DA9uRwmbOz9IM2LjOh6QPLJvi6oq7FFfZhQNXw/P1cZqC3fmRny1oSoPZtyy59GnMEzx+Om uty0FvtklZCBZnRD60DOZ1lf ) ; Key ID = 32145 lanl.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAeALbGulwjDu1bWvcfSsMqw3SZMYTFd4KMEQaGlM+GWrbyGNAD6jwpRndpKOwOwubxqEpiOj WodeZPtyC5sajvyPZZkryH6zH+3pQ4ZY8kb+A7DOhu4URPKqWKCqog7aZw1U1IyvQ1t3vn+3xVQN iuaOY3UIOqVaFNdqU6f/WsKZ ) ; Key ID = 7734 lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210429045507 20210422044327 7734 lanl.gov. rJgJtx9XLa1R4QQ8RDoH9opsI+4+RU6XDw+SaqDzu4C8G0TlPktJZYFZrfVRoZ2xCiGlSGZkFMNh JvXbEZoLVkBp2FANPaQXy5gU9fEHe8F6pM+5M1InbKOGO2czhc24C0G2DWgQ9Xva6q8ItmeTgfyJ bDYBR16ae0SJrOH4+tI= ) lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210429045507 20210422044327 11749 lanl.gov. OMXTBQtiDmKgLJZnQ4tNIULFG8fif63wXLCNqTbZP8D5FCE7hFLwkUZ+PXPvKkcaBkwHQHTniP9t nxDc1fzspWQ3Q1pvoMxgY+vTHWIfVUnCrNypdcT4aDPfJYK1wzkByAr3F+IvIaWpjk1ko1KEjVPE Adjp2VKYglh+y1vkUdjDYkL3/5IQo4Etpk/fkqippzH5QbNSq3wMZ3KiwSO8rTnj0ApjwPs+4FFY dBrEHaPHN5Ax4lQIqAWROqnB6F0fggU/WB3xF5WJb7WTzuuq0kWtNGutFQB9uxvDSAoJzwaCF2eg cN+8TXPkbxYHksyecrY7Uh6es+pDhTXcLxkO/Q== ) lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210429045507 20210422044327 32145 lanl.gov. fuviMHJwXrg0TZ6OhI83UVJEMhNa5/ahrF+S2tGevRvifheUD9r1boZJCgVgBV2KURPwdoWhfqTL ha3eO1n6D0AXQ09jmY5ju9a7YdtToSe4CFUJ2g2++fXh/RJNW1gdHYBX7xOqOeEYItZa2X2p4hlX M50cClEXfKoFSgg3upE= ) lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210429045507 20210422044327 41410 lanl.gov. ff+QS/IQX8HsJjd7LgyzsVCVlSJzQgTS7CpnzS73FcyXcq7y8ZZEz90syJ8DQ+NTRITli6fk9hnJ 8VP6z2nAS/bI4REN01HDtxLzb70mdrjRvsb+D5Qkv6ZuDibpwdHl0vd/0Hcw+vtM3xJ0fDLKcqLv bM17QOA8kkhewu8yg+MrQrQF5daJPOLKY16YpAfKzPgQcDJWGDvBM6e5ZmFLxIJi+p7kxea7LIjY S95By6goALF105r1HQMau1EZWCz8O/rKiuYIOijf01UTg4c+5wi2JkRpIOzqWbAHWvxcIjkInh1s 7P5pemk9HvZiYzAhBzplI398CctW6ChiHp2jNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 4 DNSKEY records for LANL.GOV
	`lanl.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAaXjBWIabv4Yngj0kzwu0XVIPrDYZCOHZWapvrw5KygLaFsWhyLYC5gev/9HUCajWX12Iy8I xrwOuYxD/+va0g24CZmZdHOHGEc+ZR2lUQxx/ApFYIR2RXnRtPpUXB66iM2hnky0kEBPia3OzkXW 4IimyrKsfNcKBWnq6eSwiGP2pK2acSaCPZizbTSZC5h0VeWDnZLkYUhEc02xiNvahOn4yPLyTT9b l16bYWWCscTdFlFPh+Mu7DJ89ilPt6BNd8kZqGVhxP98TGXktZ/RRZftkjSMXPOWo4MWKjmWJ7Xu BX13AtpvkFQXaUeU3fJuugIFLldencaQQRv6+oF0Wn0= ) ; Key ID = 11749`
	`lanl.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAdyHy6a8TdTSMCaVQUTJxhm1PLOTXeTIyHpBwVsBGCP2oNXwW2onr4m06+/AxbIm3Q94Oy5h /HkGBS/3/8Muw6YgxoEdAYEmbfjOqWQ0yfZKiFw1ZPSZDsHXxgku9oCoOXQNpZauG8YZk/lsmSG2 v2BZEDPacKjti7T2tCabE5y8f+eSeOKRH1ASItusCAqPcgnzNIGiRJ20Dk1IMXEnfbmmjLXdsHXO p+bLt0+m88/gArDkj07i3pnweZ8nCbfJynzqHpArEK2d5o+2rW1XJo6bDUhcjgX5x+Cz+06IV81G QLRhRPvWou0kiKu3+C6v5Z+T3qycPWYiB5jEmpI4R78= ) ; Key ID = 41410`
	`lanl.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAckWO4pi92wZlTo2rYyvn8NKB/xqpWl8Pj8+Qmz1qYFtF2VLxfmIRXDsXnmlLsEI+WwO9YQV 4SiO2DA9uRwmbOz9IM2LjOh6QPLJvi6oq7FFfZhQNXw/P1cZqC3fmRny1oSoPZtyy59GnMEzx+Om uty0FvtklZCBZnRD60DOZ1lf ) ; Key ID = 32145`
	`lanl.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAeALbGulwjDu1bWvcfSsMqw3SZMYTFd4KMEQaGlM+GWrbyGNAD6jwpRndpKOwOwubxqEpiOj WodeZPtyC5sajvyPZZkryH6zH+3pQ4ZY8kb+A7DOhu4URPKqWKCqog7aZw1U1IyvQ1t3vn+3xVQN iuaOY3UIOqVaFNdqU6f/WsKZ ) ; Key ID = 7734`
	DNSKEY=11749/SEP is now in the chain-of-trust
	DS=11749/SHA-1 verifies DNSKEY=11749/SEP
	DS=11749/SHA-256 verifies DNSKEY=11749/SEP
	DNSKEY=41410/SEP is now in the chain-of-trust
	DS=41410/SHA-256 verifies DNSKEY=41410/SEP
	DS=41410/SHA-1 verifies DNSKEY=41410/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210429045507 20210422044327 7734 lanl.gov. rJgJtx9XLa1R4QQ8RDoH9opsI+4+RU6XDw+SaqDzu4C8G0TlPktJZYFZrfVRoZ2xCiGlSGZkFMNh JvXbEZoLVkBp2FANPaQXy5gU9fEHe8F6pM+5M1InbKOGO2czhc24C0G2DWgQ9Xva6q8ItmeTgfyJ bDYBR16ae0SJrOH4+tI= )`
	`lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210429045507 20210422044327 11749 lanl.gov. OMXTBQtiDmKgLJZnQ4tNIULFG8fif63wXLCNqTbZP8D5FCE7hFLwkUZ+PXPvKkcaBkwHQHTniP9t nxDc1fzspWQ3Q1pvoMxgY+vTHWIfVUnCrNypdcT4aDPfJYK1wzkByAr3F+IvIaWpjk1ko1KEjVPE Adjp2VKYglh+y1vkUdjDYkL3/5IQo4Etpk/fkqippzH5QbNSq3wMZ3KiwSO8rTnj0ApjwPs+4FFY dBrEHaPHN5Ax4lQIqAWROqnB6F0fggU/WB3xF5WJb7WTzuuq0kWtNGutFQB9uxvDSAoJzwaCF2eg cN+8TXPkbxYHksyecrY7Uh6es+pDhTXcLxkO/Q== )`
	`lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210429045507 20210422044327 32145 lanl.gov. fuviMHJwXrg0TZ6OhI83UVJEMhNa5/ahrF+S2tGevRvifheUD9r1boZJCgVgBV2KURPwdoWhfqTL ha3eO1n6D0AXQ09jmY5ju9a7YdtToSe4CFUJ2g2++fXh/RJNW1gdHYBX7xOqOeEYItZa2X2p4hlX M50cClEXfKoFSgg3upE= )`
	`lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210429045507 20210422044327 41410 lanl.gov. ff+QS/IQX8HsJjd7LgyzsVCVlSJzQgTS7CpnzS73FcyXcq7y8ZZEz90syJ8DQ+NTRITli6fk9hnJ 8VP6z2nAS/bI4REN01HDtxLzb70mdrjRvsb+D5Qkv6ZuDibpwdHl0vd/0Hcw+vtM3xJ0fDLKcqLv bM17QOA8kkhewu8yg+MrQrQF5daJPOLKY16YpAfKzPgQcDJWGDvBM6e5ZmFLxIJi+p7kxea7LIjY S95By6goALF105r1HQMau1EZWCz8O/rKiuYIOijf01UTg4c+5wi2JkRpIOzqWbAHWvxcIjkInh1s 7P5pemk9HvZiYzAhBzplI398CctW6ChiHp2jNA== )`
	RRSIG=7734 and DNSKEY=7734 verifies the DNSKEY RRset
	RRSIG=11749 and DNSKEY=11749/SEP verifies the DNSKEY RRset
	RRSIG=32145 and DNSKEY=32145 verifies the DNSKEY RRset
	RRSIG=41410 and DNSKEY=41410/SEP verifies the DNSKEY RRset
	DNSKEY=32145 is now in the chain-of-trust
	DNSKEY=7734 is now in the chain-of-trust
	Query to adns2.es.net for LANL.GOV/A
	Received 967 bytes from 192.188.22.52
	;; Answer received from 192.188.22.52 (967 bytes) ;; HEADER SECTION ;; id = 44007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN A 204.121.60.11 lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (7 records) lanl.gov. 3600 IN NS nsx3.lanl.gov. lanl.gov. 3600 IN NS nsx.lanl.gov. lanl.gov. 3600 IN NS adns2.es.net. lanl.gov. 3600 IN NS nsx2.lanl.gov. lanl.gov. 3600 IN NS adns1.es.net. lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210427181216 20210420171303 7734 lanl.gov. x9zQlTmhP1lBQse6UOvkxD6IaqPKm2gFwKc3gXMylHqSx30LMvZtqJKTCIpUiyLf7Ez//zxwYyq9 0GaoUavR+6bxCYCExmNgMI8Z2DHfWKcinM7BohouB0sZXjR5g/Um/Z7r4W0rDNJqUB86KQK46OLg rqoBwmoqF96YK20JiAQ= ) lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210427181216 20210420171303 32145 lanl.gov. pcxmMqPwDwYAl+DtSckIEi6ewe4InVNzZE7kmhk2OEdrYd49HuXFhPxb/EAqCK6O2l8nq/t65M9X UudFmklhKi+ACZvLjEZCwdnRIE+lN0pt8YFjmaRHn6Otx1NyA5pJiBfCUB8afQCS+OH67jm0DK92 ksJLuPLEFBuJ6jBcxi8= ) ;; ADDITIONAL SECTION (7 records) nsx.lanl.gov. 3600 IN A 204.121.3.1 nsx2.lanl.gov. 3600 IN A 204.121.6.1 nsx3.lanl.gov. 3600 IN A 204.121.3.2 nsx.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::53 nsx2.lanl.gov. 3600 IN AAAA 2620:126:4000:1802::53 nsx3.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::54 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns2.es.net is authoritative for LANL.GOV
	Found RRSIG signed by lanl.gov zone
	Query to nsx2.lanl.gov for LANL.GOV/SOA
	Received 424 bytes from 204.121.6.1
	;; Answer received from 204.121.6.1 (424 bytes) ;; HEADER SECTION ;; id = 21797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN SOA ;; ANSWER SECTION (3 records) LANL.GOV. 3600 IN SOA ( nsx.LANL.GOV. hostmaster.LANL.GOV. 2012844306 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 180 ;minimum ) LANL.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20210429101159 20210422091159 7734 lanl.gov. Tm36Pt+pIFGUrTj8Ahyf0KZKrz674nTHky5Amr0rl/W7eBobpZVUO6vh6a2fiFom7Y8lUked4TAx HOoM6clKHsdQviNg82omeg/xKK8XEAV9qWEVooX1XDlu6eaoza3MWTaQeuMCiLOZECwZ/MfX61/I FOmb/lvqDZWpIlQgW50= ) lanl.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210429101159 20210422091159 32145 lanl.gov. n/pWNxX3OQAZIqAE1qJAOP4gn0eNt/6sl4sd+kHf7uBSR9GTbMVm9jCTSmr7b95rLPlPQGXHBwOB If4q/j0mgyNsj4FT5CTiAFlgmQpUpecx/1qGg2kser00Q+zvfkHFPOkETwDIK379PoLH0U1Oh+io 02tTneL2ra8EwzQDul0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to adns1.es.net for LANL.GOV/SOA
	Received 432 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (432 bytes) ;; HEADER SECTION ;; id = 40750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN SOA ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN SOA ( nsx.lanl.gov. hostmaster.lanl.gov. 2012844306 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 180 ;minimum ) lanl.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210429101159 20210422091159 7734 lanl.gov. Tm36Pt+pIFGUrTj8Ahyf0KZKrz674nTHky5Amr0rl/W7eBobpZVUO6vh6a2fiFom7Y8lUked4TAx HOoM6clKHsdQviNg82omeg/xKK8XEAV9qWEVooX1XDlu6eaoza3MWTaQeuMCiLOZECwZ/MfX61/I FOmb/lvqDZWpIlQgW50= ) lanl.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210429101159 20210422091159 32145 lanl.gov. n/pWNxX3OQAZIqAE1qJAOP4gn0eNt/6sl4sd+kHf7uBSR9GTbMVm9jCTSmr7b95rLPlPQGXHBwOB If4q/j0mgyNsj4FT5CTiAFlgmQpUpecx/1qGg2kser00Q+zvfkHFPOkETwDIK379PoLH0U1Oh+io 02tTneL2ra8EwzQDul0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to nsx.lanl.gov for LANL.GOV/SOA
	Received 424 bytes from 204.121.3.1
	;; Answer received from 204.121.3.1 (424 bytes) ;; HEADER SECTION ;; id = 20999 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN SOA ;; ANSWER SECTION (3 records) LANL.GOV. 3600 IN SOA ( nsx.LANL.GOV. hostmaster.LANL.GOV. 2012844306 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 180 ;minimum ) LANL.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20210429101159 20210422091159 7734 lanl.gov. Tm36Pt+pIFGUrTj8Ahyf0KZKrz674nTHky5Amr0rl/W7eBobpZVUO6vh6a2fiFom7Y8lUked4TAx HOoM6clKHsdQviNg82omeg/xKK8XEAV9qWEVooX1XDlu6eaoza3MWTaQeuMCiLOZECwZ/MfX61/I FOmb/lvqDZWpIlQgW50= ) lanl.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210429101159 20210422091159 32145 lanl.gov. n/pWNxX3OQAZIqAE1qJAOP4gn0eNt/6sl4sd+kHf7uBSR9GTbMVm9jCTSmr7b95rLPlPQGXHBwOB If4q/j0mgyNsj4FT5CTiAFlgmQpUpecx/1qGg2kser00Q+zvfkHFPOkETwDIK379PoLH0U1Oh+io 02tTneL2ra8EwzQDul0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to nsx3.lanl.gov for LANL.GOV/SOA
	Received 424 bytes from 204.121.3.2
	;; Answer received from 204.121.3.2 (424 bytes) ;; HEADER SECTION ;; id = 65343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN SOA ;; ANSWER SECTION (3 records) LANL.GOV. 3600 IN SOA ( nsx.LANL.GOV. hostmaster.LANL.GOV. 2012844306 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 180 ;minimum ) LANL.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20210429101159 20210422091159 7734 lanl.gov. Tm36Pt+pIFGUrTj8Ahyf0KZKrz674nTHky5Amr0rl/W7eBobpZVUO6vh6a2fiFom7Y8lUked4TAx HOoM6clKHsdQviNg82omeg/xKK8XEAV9qWEVooX1XDlu6eaoza3MWTaQeuMCiLOZECwZ/MfX61/I FOmb/lvqDZWpIlQgW50= ) lanl.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210429101159 20210422091159 32145 lanl.gov. n/pWNxX3OQAZIqAE1qJAOP4gn0eNt/6sl4sd+kHf7uBSR9GTbMVm9jCTSmr7b95rLPlPQGXHBwOB If4q/j0mgyNsj4FT5CTiAFlgmQpUpecx/1qGg2kser00Q+zvfkHFPOkETwDIK379PoLH0U1Oh+io 02tTneL2ra8EwzQDul0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to adns2.es.net for LANL.GOV/A
	Received 967 bytes from 192.188.22.52
	;; Answer received from 192.188.22.52 (967 bytes) ;; HEADER SECTION ;; id = 45470 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN A 204.121.60.11 lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (7 records) lanl.gov. 3600 IN NS nsx.lanl.gov. lanl.gov. 3600 IN NS adns2.es.net. lanl.gov. 3600 IN NS nsx3.lanl.gov. lanl.gov. 3600 IN NS nsx2.lanl.gov. lanl.gov. 3600 IN NS adns1.es.net. lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210427181216 20210420171303 7734 lanl.gov. x9zQlTmhP1lBQse6UOvkxD6IaqPKm2gFwKc3gXMylHqSx30LMvZtqJKTCIpUiyLf7Ez//zxwYyq9 0GaoUavR+6bxCYCExmNgMI8Z2DHfWKcinM7BohouB0sZXjR5g/Um/Z7r4W0rDNJqUB86KQK46OLg rqoBwmoqF96YK20JiAQ= ) lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210427181216 20210420171303 32145 lanl.gov. pcxmMqPwDwYAl+DtSckIEi6ewe4InVNzZE7kmhk2OEdrYd49HuXFhPxb/EAqCK6O2l8nq/t65M9X UudFmklhKi+ACZvLjEZCwdnRIE+lN0pt8YFjmaRHn6Otx1NyA5pJiBfCUB8afQCS+OH67jm0DK92 ksJLuPLEFBuJ6jBcxi8= ) ;; ADDITIONAL SECTION (7 records) nsx.lanl.gov. 3600 IN A 204.121.3.1 nsx2.lanl.gov. 3600 IN A 204.121.6.1 nsx3.lanl.gov. 3600 IN A 204.121.3.2 nsx.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::53 nsx2.lanl.gov. 3600 IN AAAA 2620:126:4000:1802::53 nsx3.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::54 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	LANL.GOV A RR has value 204.121.60.11
	Found 2 RRSIGs over A RRset
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= )`
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= )`
	RRSIG=7734 and DNSKEY=7734 verifies the A RRset
	RRSIG=32145 and DNSKEY=32145 verifies the A RRset

LANL.GOV

	Query to nsx.lanl.gov for LANL.GOV/A
	Received 389 bytes from 204.121.3.1
	;; Answer received from 204.121.3.1 (389 bytes) ;; HEADER SECTION ;; id = 1802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) LANL.GOV. 3600 IN A 204.121.60.11 LANL.GOV. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	nsx.lanl.gov is authoritative for LANL.GOV
	Found RRSIG signed by lanl.gov zone
	Query to nsx.lanl.gov for LANL.GOV/A
	Received 389 bytes from 204.121.3.1
	;; Answer received from 204.121.3.1 (389 bytes) ;; HEADER SECTION ;; id = 19541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) LANL.GOV. 3600 IN A 204.121.60.11 LANL.GOV. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	LANL.GOV A RR has value 204.121.60.11
	Found 2 RRSIGs over A RRset
	`LANL.GOV. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= )`
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= )`
	RRSIG=7734 and DNSKEY=7734 verifies the A RRset
	RRSIG=32145 and DNSKEY=32145 verifies the A RRset

LANL.GOV

	Query to nsx2.lanl.gov for LANL.GOV/A
	Received 389 bytes from 204.121.6.1
	;; Answer received from 204.121.6.1 (389 bytes) ;; HEADER SECTION ;; id = 10071 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) LANL.GOV. 3600 IN A 204.121.60.11 LANL.GOV. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	nsx2.lanl.gov is authoritative for LANL.GOV
	Found RRSIG signed by lanl.gov zone
	Query to nsx2.lanl.gov for LANL.GOV/A
	Received 389 bytes from 204.121.6.1
	;; Answer received from 204.121.6.1 (389 bytes) ;; HEADER SECTION ;; id = 10891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) LANL.GOV. 3600 IN A 204.121.60.11 LANL.GOV. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	LANL.GOV A RR has value 204.121.60.11
	Found 2 RRSIGs over A RRset
	`LANL.GOV. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= )`
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= )`
	RRSIG=7734 and DNSKEY=7734 verifies the A RRset
	RRSIG=32145 and DNSKEY=32145 verifies the A RRset

LANL.GOV

	Query to adns1.es.net for LANL.GOV/A
	Received 397 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (397 bytes) ;; HEADER SECTION ;; id = 55433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN A 204.121.60.11 lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns1.es.net is authoritative for LANL.GOV
	Found RRSIG signed by lanl.gov zone
	Query to adns1.es.net for LANL.GOV/A
	Received 397 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (397 bytes) ;; HEADER SECTION ;; id = 21862 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN A 204.121.60.11 lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	LANL.GOV A RR has value 204.121.60.11
	Found 2 RRSIGs over A RRset
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= )`
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= )`
	RRSIG=7734 and DNSKEY=7734 verifies the A RRset
	RRSIG=32145 and DNSKEY=32145 verifies the A RRset

LANL.GOV

	Query to nsx3.lanl.gov for LANL.GOV/A
	Received 389 bytes from 204.121.3.2
	;; Answer received from 204.121.3.2 (389 bytes) ;; HEADER SECTION ;; id = 57497 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) LANL.GOV. 3600 IN A 204.121.60.11 LANL.GOV. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	nsx3.lanl.gov is authoritative for LANL.GOV
	Found RRSIG signed by lanl.gov zone
	Query to nsx3.lanl.gov for LANL.GOV/A
	Received 389 bytes from 204.121.3.2
	;; Answer received from 204.121.3.2 (389 bytes) ;; HEADER SECTION ;; id = 59658 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) LANL.GOV. 3600 IN A 204.121.60.11 LANL.GOV. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	LANL.GOV A RR has value 204.121.60.11
	Found 2 RRSIGs over A RRset
	`LANL.GOV. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 7734 lanl.gov. XRWs6Dlx8p0zGJHH6KVsolH2t/avP1CkQPIIAvBJqi6FRi1SRIh+q4Y7xaJM3WSrTcJiUdRlLZeY cS0Wtf1lQv9FF0fXnzFI4O61X12OG19rPc3NZiMpRELZMCfOdGo9Yl0usF8VxTpVtSljxpURqkl7 mIkl2zWVnwlwuXbV7ZM= )`
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210428101012 20210421091504 32145 lanl.gov. g3w71QyJtYYLiGNtY+bOrhQUv2Vf5hXe9Q7O41s3HnAY3MxjXXJHUe95JN/fQr1A1krhEQZQzKpn S0JRu/+lsLG3z5gCBla54NaKALTXLl0M/TR5R2qbupzlQ3CX0Zfx2KewINswFl/4YjrNKIQQzhYR ZCxz0/E7WobCm/kWkiA= )`
	RRSIG=7734 and DNSKEY=7734 verifies the A RRset
	RRSIG=32145 and DNSKEY=32145 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test LANL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: