DNSSEC Analyzer - MEDLINEPLUS.GOV

Domain Name:

Time: 2020-07-04 23:08:37 UTC, NTP stratum 4

Analyzing DNSSEC problems for MEDLINEPLUS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1141 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (1141 bytes) ;; HEADER SECTION ;; id = 47656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200722000000 20200701000000 20326 . OegGYuMyXFOfyJusWYcPZbbrbjHTk5zkyAFfgGf8vWUH8tHoLHn02+QK8u2D/RUAvacwChEOoh3/ iAW5n5GJk+CLYtilcgtEt5uKYX5uVt/vM9aDKr/hGmnhq1Z75scHpLRwL9e/icHZuiyQdgElGwwL hh1vn+m29fwwyAim3UG28gNY/DaifSuK/9g6dlCFDCjBHnOuSqOxoM53vfaQB/bGsXSTZbbWtReh ixpccKxVGwjl3XDG27Itgji7s/JQM2AhgYJcDULa0JTN06fGQM5dmhvvXTlkAZ7fhqTVzyBQcsu9 kbRbYGc0mhDCUzPv6qEigw+pKpifMmVC3+Q7sw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200722000000 20200701000000 20326 . OegGYuMyXFOfyJusWYcPZbbrbjHTk5zkyAFfgGf8vWUH8tHoLHn02+QK8u2D/RUAvacwChEOoh3/ iAW5n5GJk+CLYtilcgtEt5uKYX5uVt/vM9aDKr/hGmnhq1Z75scHpLRwL9e/icHZuiyQdgElGwwL hh1vn+m29fwwyAim3UG28gNY/DaifSuK/9g6dlCFDCjBHnOuSqOxoM53vfaQB/bGsXSTZbbWtReh ixpccKxVGwjl3XDG27Itgji7s/JQM2AhgYJcDULa0JTN06fGQM5dmhvvXTlkAZ7fhqTVzyBQcsu9 kbRbYGc0mhDCUzPv6qEigw+pKpifMmVC3+Q7sw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	DNSKEY=48903 is now in the chain-of-trust
	Query to d.root-servers.net for MEDLINEPLUS.GOV/A
	Received 670 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (670 bytes) ;; HEADER SECTION ;; id = 57262 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200717170000 20200704160000 46594 . AHOP1iLfNhPc9HTKzfmJ8w7sX3G39rBw7pbsmVayE3KdeWevdTUrnk8mXSDoRdXjvl1pDjjXnkBw YQQSww/oJmMF64gLRoQcWkUlmY8Mfsxnnn58Y3n6mfDm8qM0AqGScONcYjFdhtC5tFYcu2ls9xKk KgYa/a9zc6KkNPGJQjq4pLDB0XbRKZLgjZTMTRlgMM3O5FNp4dVfDIm8GlWapzoaPht+5BU9Dq5k PL4NN2fkR+hEs0P9JmVYN31rbXGdF1N7yG1lbj75DZSBpX1neAEHkyhoeupTnqdT3tXpDz8iXjkw ZCAVdoBbYhFquViGd4thxRsTUSbfPM41W8eO3g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (661 bytes) ;; HEADER SECTION ;; id = 31006 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200717170000 20200704160000 46594 . AHOP1iLfNhPc9HTKzfmJ8w7sX3G39rBw7pbsmVayE3KdeWevdTUrnk8mXSDoRdXjvl1pDjjXnkBw YQQSww/oJmMF64gLRoQcWkUlmY8Mfsxnnn58Y3n6mfDm8qM0AqGScONcYjFdhtC5tFYcu2ls9xKk KgYa/a9zc6KkNPGJQjq4pLDB0XbRKZLgjZTMTRlgMM3O5FNp4dVfDIm8GlWapzoaPht+5BU9Dq5k PL4NN2fkR+hEs0P9JmVYN31rbXGdF1N7yG1lbj75DZSBpX1neAEHkyhoeupTnqdT3tXpDz8iXjkw ZCAVdoBbYhFquViGd4thxRsTUSbfPM41W8eO3g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 403 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (403 bytes) ;; HEADER SECTION ;; id = 41717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200717170000 20200704160000 46594 . AHOP1iLfNhPc9HTKzfmJ8w7sX3G39rBw7pbsmVayE3KdeWevdTUrnk8mXSDoRdXjvl1pDjjXnkBw YQQSww/oJmMF64gLRoQcWkUlmY8Mfsxnnn58Y3n6mfDm8qM0AqGScONcYjFdhtC5tFYcu2ls9xKk KgYa/a9zc6KkNPGJQjq4pLDB0XbRKZLgjZTMTRlgMM3O5FNp4dVfDIm8GlWapzoaPht+5BU9Dq5k PL4NN2fkR+hEs0P9JmVYN31rbXGdF1N7yG1lbj75DZSBpX1neAEHkyhoeupTnqdT3tXpDz8iXjkw ZCAVdoBbYhFquViGd4thxRsTUSbfPM41W8eO3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200717170000 20200704160000 46594 . AHOP1iLfNhPc9HTKzfmJ8w7sX3G39rBw7pbsmVayE3KdeWevdTUrnk8mXSDoRdXjvl1pDjjXnkBw YQQSww/oJmMF64gLRoQcWkUlmY8Mfsxnnn58Y3n6mfDm8qM0AqGScONcYjFdhtC5tFYcu2ls9xKk KgYa/a9zc6KkNPGJQjq4pLDB0XbRKZLgjZTMTRlgMM3O5FNp4dVfDIm8GlWapzoaPht+5BU9Dq5k PL4NN2fkR+hEs0P9JmVYN31rbXGdF1N7yG1lbj75DZSBpX1neAEHkyhoeupTnqdT3tXpDz8iXjkw ZCAVdoBbYhFquViGd4thxRsTUSbfPM41W8eO3g== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 20341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200713190254 20200628185754 7698 gov. cpLMlX7mvjmWoqy6BKZhJ39gUGSOy+c5uDA/f5A8nwkBllxnKp9jlCtyrJL6/FHVclJCkeeXzWPb 79sxp7aRZHQgR7jp4r/i6HSWGhOHCWYBNUm69ghiMBUPD+z8F29lp66nZTVDkgssvLTc/hGf5DF/ QfvNQE1ciB0MtKlmEk1QJRYNO3R5U1ZbjvH6+IpR+TfvkQxvXdPo/jeWN+OqOuZ6jg7bS5q3mWds fZHILyyJfXvAMq0wGnpA6bLHMXsT0okBsaAYQ3TTXJzUPubdNEwmey2hE9Qqs00huFbENw9tXnBb nuzJWV4zTvnbAdnGwYzhhYLKBp7W5xF1nEKcwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200713190254 20200628185754 7698 gov. cpLMlX7mvjmWoqy6BKZhJ39gUGSOy+c5uDA/f5A8nwkBllxnKp9jlCtyrJL6/FHVclJCkeeXzWPb 79sxp7aRZHQgR7jp4r/i6HSWGhOHCWYBNUm69ghiMBUPD+z8F29lp66nZTVDkgssvLTc/hGf5DF/ QfvNQE1ciB0MtKlmEk1QJRYNO3R5U1ZbjvH6+IpR+TfvkQxvXdPo/jeWN+OqOuZ6jg7bS5q3mWds fZHILyyJfXvAMq0wGnpA6bLHMXsT0okBsaAYQ3TTXJzUPubdNEwmey2hE9Qqs00huFbENw9tXnBb nuzJWV4zTvnbAdnGwYzhhYLKBp7W5xF1nEKcwA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40176 is now in the chain-of-trust
	Query to c.gov-servers.net for MEDLINEPLUS.GOV/A
	Received 442 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (442 bytes) ;; HEADER SECTION ;; id = 58256 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) MEDLINEPLUS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. MXKg261AmX9dvZNA6pCFta7aOUPjWV8ePYXbLaNZna0la0yP8mV5Yu4cIBlUBRBdXUjFdybOo+tc NLmfBW5k46grjIJgL+NBlfdioeZGRVCQOVm0kuvdz0OYQU6cNbPI8MLGFPIlUS18InznNqf9oz/S 7hSnMenqsZrH7V8lrfM9vFJFVjZiyB7PNSbIypcP3HTA01IcaWXDjbiyxSe8aQ== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for MEDLINEPLUS.GOV/DNSKEY
	Received 442 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (442 bytes) ;; HEADER SECTION ;; id = 2382 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) MEDLINEPLUS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. MXKg261AmX9dvZNA6pCFta7aOUPjWV8ePYXbLaNZna0la0yP8mV5Yu4cIBlUBRBdXUjFdybOo+tc NLmfBW5k46grjIJgL+NBlfdioeZGRVCQOVm0kuvdz0OYQU6cNbPI8MLGFPIlUS18InznNqf9oz/S 7hSnMenqsZrH7V8lrfM9vFJFVjZiyB7PNSbIypcP3HTA01IcaWXDjbiyxSe8aQ== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MEDLINEPLUS.GOV

MEDLINEPLUS.GOV

	Checking DS between GOV and MEDLINEPLUS.GOV
	Query to a.gov-servers.net for MEDLINEPLUS.GOV/DS
	Received 323 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (323 bytes) ;; HEADER SECTION ;; id = 61184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DS ;; ANSWER SECTION (3 records) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. MXKg261AmX9dvZNA6pCFta7aOUPjWV8ePYXbLaNZna0la0yP8mV5Yu4cIBlUBRBdXUjFdybOo+tc NLmfBW5k46grjIJgL+NBlfdioeZGRVCQOVm0kuvdz0OYQU6cNbPI8MLGFPIlUS18InznNqf9oz/S 7hSnMenqsZrH7V8lrfM9vFJFVjZiyB7PNSbIypcP3HTA01IcaWXDjbiyxSe8aQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for MEDLINEPLUS.GOV in the GOV zone
	DS=30870/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=30870/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. MXKg261AmX9dvZNA6pCFta7aOUPjWV8ePYXbLaNZna0la0yP8mV5Yu4cIBlUBRBdXUjFdybOo+tc NLmfBW5k46grjIJgL+NBlfdioeZGRVCQOVm0kuvdz0OYQU6cNbPI8MLGFPIlUS18InznNqf9oz/S 7hSnMenqsZrH7V8lrfM9vFJFVjZiyB7PNSbIypcP3HTA01IcaWXDjbiyxSe8aQ== )`
	RRSIG=40176 and DNSKEY=40176 verifies the DS RRset
	DS=30870/SHA-256 is now in the chain-of-trust
	`MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce )`
	`MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 )`
	Query to gslb03.nlm.nih.GOV for MEDLINEPLUS.GOV/DNSKEY
	Received 1202 bytes from 130.14.252.53
	;; Answer received from 130.14.252.53 (1202 bytes) ;; HEADER SECTION ;; id = 62781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAblrLAPr4kvce/QDkcRIf86BXFgJAFGWt4Kmfp6+npCkf6E0RtmumunRVB6tMKhgVdqykCF8 yjFQ75D3XRffLVQkY/enq6J3y5xtDG5dhe6bt5CmZ4p3XDRaiqMWWV7RMP0UErMo5Xhupy7xXDvb Vqrh3DOrN75MDp5CWk8egA6yOTCNXXupSv+5jdRjkjnM297W8JE9Dl3N3EPNT/gpcQWSY75cFLGv 653++GbVu00TBQ9+Q6Csq5ZybgbFW0Z+WrmaASsceO9jUKX1weNOqsMPHgWuPdfQY+SM5oI94mTc 1U5mEjkBXZSzavedEero+f+J+PnRulLmbA/NJoHAsNE= ) ; Key ID = 59630 MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAc9XflNiZCBGHpwTw6pHrnuwI0vTvwGsJBUFAKAU+q51Ra4q7s/bgbbOEFdAOdzdNDWovj0Y ZJ2aHOUIA/P28xn0rVJt4z8TAYqOEMyxeUgaDABpbfsEAKmSVTRj9D5wf0ImLdCDLzUykAhdH13R RgRtsDTIcXa+xQ3zapIkLKF7zJchLxlpVkQPBpeMw2rF2mrYNv1wM9Pzf7gieIqnAyHRVZ+eymV2 UeyurHh3vMOO4PmXUI5mMIuKscvTihOvj6MmBW7t5CbMAkVA6Hymt1Eold1IhVHx+HxzTuwQ98nx hsjqzBEEvFMY0g4aFVi/rrxc/8OejYwwWyhRqR3Ls18= ) ; Key ID = 30870 MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200723222326 20200702222326 59630 medlineplus.gov. hNxs7Vn3BWmB2sSGH3NqQKk5uCQ/QnkFVe9Vv2uPhOz9TCGCcfOfCTU4YMs6l+Fg3ivAlJbMQFIY fZ4wt4WncZMNEOCflTTnalmUTuGP9AhfYfVi90zLZVBbPSa6dY5YoS5NwVzJCq5GmOwEVdLKm4xr 4Lvef08MQ8oQSlDTX99TMLXEAhJBo8DZponPm5mTLoBgqX6Q7KNZ5m9nNHHd7iJI3nTgetZeQNhH TYNpEbTtssgD+5F9o+TgG+aR+hhGx+ZI6J5vXyMO/fag6jM5RUEAFsNJpJQobYE1wcbQ9Lg1jIla usqROcSXY1dWkRrxvb5uoaRfLwbZRoMidIcx/w== ) MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200723222326 20200702222326 30870 medlineplus.gov. cBltUWHoNTOeCE5q+T/Dkifa6gbIvfkFVVQw9f3tSbVII4ojS8WIkQBVzp5Lp51/gOBtdGXZNS2L EJzjar7OPxDzMNEG5nXhwlS/zVpn1we7TduyE51UAQul2mjWEtPpNN7wx97X3tZboJie9y+5x0qD ATLQdrITDErWrJoh+jp+uMjm1qZesqmF5kAZ8TpYaOUDeQbSRDSsNiyTkS9OowiR/l5AnzSMvTcw OTyXHBFzQeNXXHW6cdGS0+0l5nHo+7Kq2rIgzEnd1cD14lsgwwLDQikFVPzaM1vIRjVbZ/p+FTfH ZxSTp+wWs4H2kZ+i4VO+at2nFTzKs31HK561/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for MEDLINEPLUS.GOV
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAblrLAPr4kvce/QDkcRIf86BXFgJAFGWt4Kmfp6+npCkf6E0RtmumunRVB6tMKhgVdqykCF8 yjFQ75D3XRffLVQkY/enq6J3y5xtDG5dhe6bt5CmZ4p3XDRaiqMWWV7RMP0UErMo5Xhupy7xXDvb Vqrh3DOrN75MDp5CWk8egA6yOTCNXXupSv+5jdRjkjnM297W8JE9Dl3N3EPNT/gpcQWSY75cFLGv 653++GbVu00TBQ9+Q6Csq5ZybgbFW0Z+WrmaASsceO9jUKX1weNOqsMPHgWuPdfQY+SM5oI94mTc 1U5mEjkBXZSzavedEero+f+J+PnRulLmbA/NJoHAsNE= ) ; Key ID = 59630`
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAc9XflNiZCBGHpwTw6pHrnuwI0vTvwGsJBUFAKAU+q51Ra4q7s/bgbbOEFdAOdzdNDWovj0Y ZJ2aHOUIA/P28xn0rVJt4z8TAYqOEMyxeUgaDABpbfsEAKmSVTRj9D5wf0ImLdCDLzUykAhdH13R RgRtsDTIcXa+xQ3zapIkLKF7zJchLxlpVkQPBpeMw2rF2mrYNv1wM9Pzf7gieIqnAyHRVZ+eymV2 UeyurHh3vMOO4PmXUI5mMIuKscvTihOvj6MmBW7t5CbMAkVA6Hymt1Eold1IhVHx+HxzTuwQ98nx hsjqzBEEvFMY0g4aFVi/rrxc/8OejYwwWyhRqR3Ls18= ) ; Key ID = 30870`
	DNSKEY=30870/SEP is now in the chain-of-trust
	DS=30870/SHA-256 verifies DNSKEY=30870/SEP
	DS=30870/SHA-1 verifies DNSKEY=30870/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200723222326 20200702222326 59630 medlineplus.gov. hNxs7Vn3BWmB2sSGH3NqQKk5uCQ/QnkFVe9Vv2uPhOz9TCGCcfOfCTU4YMs6l+Fg3ivAlJbMQFIY fZ4wt4WncZMNEOCflTTnalmUTuGP9AhfYfVi90zLZVBbPSa6dY5YoS5NwVzJCq5GmOwEVdLKm4xr 4Lvef08MQ8oQSlDTX99TMLXEAhJBo8DZponPm5mTLoBgqX6Q7KNZ5m9nNHHd7iJI3nTgetZeQNhH TYNpEbTtssgD+5F9o+TgG+aR+hhGx+ZI6J5vXyMO/fag6jM5RUEAFsNJpJQobYE1wcbQ9Lg1jIla usqROcSXY1dWkRrxvb5uoaRfLwbZRoMidIcx/w== )`
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200723222326 20200702222326 30870 medlineplus.gov. cBltUWHoNTOeCE5q+T/Dkifa6gbIvfkFVVQw9f3tSbVII4ojS8WIkQBVzp5Lp51/gOBtdGXZNS2L EJzjar7OPxDzMNEG5nXhwlS/zVpn1we7TduyE51UAQul2mjWEtPpNN7wx97X3tZboJie9y+5x0qD ATLQdrITDErWrJoh+jp+uMjm1qZesqmF5kAZ8TpYaOUDeQbSRDSsNiyTkS9OowiR/l5AnzSMvTcw OTyXHBFzQeNXXHW6cdGS0+0l5nHo+7Kq2rIgzEnd1cD14lsgwwLDQikFVPzaM1vIRjVbZ/p+FTfH ZxSTp+wWs4H2kZ+i4VO+at2nFTzKs31HK561/Q== )`
	RRSIG=59630 and DNSKEY=59630 verifies the DNSKEY RRset
	RRSIG=30870 and DNSKEY=30870/SEP verifies the DNSKEY RRset
	DNSKEY=59630 is now in the chain-of-trust
	Query to gslb03.nlm.nih.GOV for MEDLINEPLUS.GOV/A
	Received 389 bytes from 130.14.252.53
	;; Answer received from 130.14.252.53 (389 bytes) ;; HEADER SECTION ;; id = 56173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (2 records) MEDLINEPLUS.GOV. 30 IN CNAME medlineplus.awsprod.nlm.nih.GOV. MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20200723222313 20200702222313 59630 medlineplus.gov. R/IDNWKF8vqhlIQAJewybnzDj9ig5H6OcMAvIu5sMVirFBvEXjM4P/PWdzg25bS6/WfM6Wq9+Hks 8WevDJOolnaby9Kp+CqezHuz7JP96vMMWqf3PU6cl6UYUTJ6W3YJrEIrkqTKLmJYiKr/n8mXokWd +0bl16xvtrc3ChlcHfUc1Nd0V+HoJlDjoilu+q6cUs8hI6ANTKBBxkxr5UfduSOqBIhVpzbKrAWT olZal0rx11yugSopLWZlt1GNw+mrWhmqotjfnuviPmqKWZlX4KLpu7utlxQKkK1GjiOQcKLzS3ny 98RVT/HiOardlxikOoibfMfvBWk3EjCKiFHmnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MEDLINEPLUS.GOV is authoritative for MEDLINEPLUS.GOV
	Found RRSIG signed by medlineplus.gov zone
	MEDLINEPLUS.GOV is a CNAME to medlineplus.awsprod.nlm.nih.GOV
	Found 1 RRSIGs over CNAME RRset
	`MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20200723222313 20200702222313 59630 medlineplus.gov. R/IDNWKF8vqhlIQAJewybnzDj9ig5H6OcMAvIu5sMVirFBvEXjM4P/PWdzg25bS6/WfM6Wq9+Hks 8WevDJOolnaby9Kp+CqezHuz7JP96vMMWqf3PU6cl6UYUTJ6W3YJrEIrkqTKLmJYiKr/n8mXokWd +0bl16xvtrc3ChlcHfUc1Nd0V+HoJlDjoilu+q6cUs8hI6ANTKBBxkxr5UfduSOqBIhVpzbKrAWT olZal0rx11yugSopLWZlt1GNw+mrWhmqotjfnuviPmqKWZlX4KLpu7utlxQKkK1GjiOQcKLzS3ny 98RVT/HiOardlxikOoibfMfvBWk3EjCKiFHmnQ== )`
	RRSIG=59630 and DNSKEY=59630 verifies the CNAME RRset

GOV

	Query to b.gov-servers.net for medlineplus.awsprod.nlm.nih.GOV/A
	Received 608 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (608 bytes) ;; HEADER SECTION ;; id = 7091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nih.GOV. 86400 IN NS ns.nih.GOV. nih.GOV. 86400 IN NS ns3.nih.GOV. nih.GOV. 86400 IN NS ns2.nih.GOV. nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. NvHsq5RSw6kO4iLpvJFBXdzZ2b5qpTxMJkhM5VS6DtI9uhI/Rx+DZAkZh2RxcGWh/iBz86JWFXok z4klJa12jh54MzIVJco7ikmkpi6hiMTShJ4A3hs6xKxkgDIPZOGAlDYDtxztTpUfU5uyiYXQVBFm KxW3XIWIGGndtyWSLHa+ZIPkAWOedkP0oROkV71YNT/0vyHOocFAitwSNTnenA== ) ;; ADDITIONAL SECTION (7 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for nih.GOV/DNSKEY
	Received 584 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (584 bytes) ;; HEADER SECTION ;; id = 63239 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nih.GOV. 86400 IN NS ns.nih.GOV. nih.GOV. 86400 IN NS ns3.nih.GOV. nih.GOV. 86400 IN NS ns2.nih.GOV. nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. NvHsq5RSw6kO4iLpvJFBXdzZ2b5qpTxMJkhM5VS6DtI9uhI/Rx+DZAkZh2RxcGWh/iBz86JWFXok z4klJa12jh54MzIVJco7ikmkpi6hiMTShJ4A3hs6xKxkgDIPZOGAlDYDtxztTpUfU5uyiYXQVBFm KxW3XIWIGGndtyWSLHa+ZIPkAWOedkP0oROkV71YNT/0vyHOocFAitwSNTnenA== ) ;; ADDITIONAL SECTION (7 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nih.GOV

nih.GOV

	Checking DS between GOV and nih.GOV
	Query to b.gov-servers.net for nih.GOV/DS
	Received 399 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (399 bytes) ;; HEADER SECTION ;; id = 39574 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DS ;; ANSWER SECTION (5 records) nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. NvHsq5RSw6kO4iLpvJFBXdzZ2b5qpTxMJkhM5VS6DtI9uhI/Rx+DZAkZh2RxcGWh/iBz86JWFXok z4klJa12jh54MzIVJco7ikmkpi6hiMTShJ4A3hs6xKxkgDIPZOGAlDYDtxztTpUfU5uyiYXQVBFm KxW3XIWIGGndtyWSLHa+ZIPkAWOedkP0oROkV71YNT/0vyHOocFAitwSNTnenA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for nih.GOV in the GOV zone
	DS=44025/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=35355/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=44025/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=35355/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. NvHsq5RSw6kO4iLpvJFBXdzZ2b5qpTxMJkhM5VS6DtI9uhI/Rx+DZAkZh2RxcGWh/iBz86JWFXok z4klJa12jh54MzIVJco7ikmkpi6hiMTShJ4A3hs6xKxkgDIPZOGAlDYDtxztTpUfU5uyiYXQVBFm KxW3XIWIGGndtyWSLHa+ZIPkAWOedkP0oROkV71YNT/0vyHOocFAitwSNTnenA== )`
	RRSIG=40176 and DNSKEY=40176 verifies the DS RRset
	DS=44025/SHA-256 is now in the chain-of-trust
	DS=35355/SHA-256 is now in the chain-of-trust
	`nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 )`
	`nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 )`
	`nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c`
	`nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d`
	Query to ns3.nih.GOV for nih.GOV/DNSKEY
	Received 922 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (922 bytes) ;; HEADER SECTION ;; id = 37050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nih.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAb0YtEKIKTsaOToJPWsYEVdKzPak7o1lHMqFyRZCIFVnn5RrTeeR0HmHWY7jSz+U082CHcp8 4VWRl48r3igH4QNWwSziVmJZB3b4bMp9ZNZ7HkOIzyX5B+XLvGORQAelGbOjAuAPEd/7La2k56OI ZwciIUY1uUPwQBlxIaHNrzkT ) ; Key ID = 10427 nih.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAcFsAJQcRWvmnxWgqWhqtCA8yi6k6fixeUOCOYOL8yEBg0lv33N6u5mqDcgj/1BdhjaYv+H0 e9Bjv95zxo+1qyjid2ADDtH47p3mFq0rUB115gFTWADvPnBmTeEl0cqIUcFjkSFONy5JvAamiJmf HrqwkDME9UNn4jMUipeFCYgSEslXWZZLmfUwdow7SDFa/hNG+eUMfXDiM5HAd6hsF6SAF66CjppK AQarGtuhkVPYSQj/hQzhVNhwpZN7LEdcUsqQh0R8QfhD2UXnhAwDerFrIjhUZHhfQueYQs3avDee GdTE/sQ/afzutrqKfNNFAyxTBlwRhvbooOizhQOI7jE= ) ; Key ID = 35355 nih.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200707232416 20200703223751 10427 nih.gov. KrPZ/2mxc7f8kpM8j5I3SvYol1mVw01OxNc8V8kLJ5OTyd+LdZm1uDmigGLoc1X1TBDWqE60htri afkzhdKS4/2mP2vYjU32AuLXKQLkMOE8eOe8w3HvZXvOIts6WTerFMhpMik5L+YyHQRVwyieBs/j ZMgXul/Tad+6LJVoBG8= ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200707232416 20200703223751 35355 nih.gov. QhpYqtxKVnWSaVJu8q5nkMiuY586Vuk6O+PhtQA6eMxF3KSRlsmAlpdF6IJSQCPRwXaGTIVl6jE+ q4Hf4Ic5n5DQP12rwvEif3VISLLMyR7KfOWQZUU6Tp4IFA/xrhMKUmUsrhRHNHQ3kF5NFcRXZFLJ 0MY8P5pLktfYqO5+l6i/jq+4odFEXrJR+DYaz74A4KUT3VJhpKKIWHNFqYm1UtGuOoGoRyAuEXto pWNc7rfa23VZZXEyjEeWjmE+gOLha9joXGen6l/FG/NLIyfJDQZ9LmMaOiKCvnTKxwegPF2KhQGA E/A5mc9Yp/f7cO/CU4/Ydp0wx1cPlDvfZnrPHQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nih.GOV
	`nih.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAb0YtEKIKTsaOToJPWsYEVdKzPak7o1lHMqFyRZCIFVnn5RrTeeR0HmHWY7jSz+U082CHcp8 4VWRl48r3igH4QNWwSziVmJZB3b4bMp9ZNZ7HkOIzyX5B+XLvGORQAelGbOjAuAPEd/7La2k56OI ZwciIUY1uUPwQBlxIaHNrzkT ) ; Key ID = 10427`
	`nih.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAcFsAJQcRWvmnxWgqWhqtCA8yi6k6fixeUOCOYOL8yEBg0lv33N6u5mqDcgj/1BdhjaYv+H0 e9Bjv95zxo+1qyjid2ADDtH47p3mFq0rUB115gFTWADvPnBmTeEl0cqIUcFjkSFONy5JvAamiJmf HrqwkDME9UNn4jMUipeFCYgSEslXWZZLmfUwdow7SDFa/hNG+eUMfXDiM5HAd6hsF6SAF66CjppK AQarGtuhkVPYSQj/hQzhVNhwpZN7LEdcUsqQh0R8QfhD2UXnhAwDerFrIjhUZHhfQueYQs3avDee GdTE/sQ/afzutrqKfNNFAyxTBlwRhvbooOizhQOI7jE= ) ; Key ID = 35355`
	DNSKEY=35355/SEP is now in the chain-of-trust
	DS=35355/SHA-256 verifies DNSKEY=35355/SEP
	DS=35355/SHA-1 verifies DNSKEY=35355/SEP
	DS=44025/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`nih.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200707232416 20200703223751 10427 nih.gov. KrPZ/2mxc7f8kpM8j5I3SvYol1mVw01OxNc8V8kLJ5OTyd+LdZm1uDmigGLoc1X1TBDWqE60htri afkzhdKS4/2mP2vYjU32AuLXKQLkMOE8eOe8w3HvZXvOIts6WTerFMhpMik5L+YyHQRVwyieBs/j ZMgXul/Tad+6LJVoBG8= )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200707232416 20200703223751 35355 nih.gov. QhpYqtxKVnWSaVJu8q5nkMiuY586Vuk6O+PhtQA6eMxF3KSRlsmAlpdF6IJSQCPRwXaGTIVl6jE+ q4Hf4Ic5n5DQP12rwvEif3VISLLMyR7KfOWQZUU6Tp4IFA/xrhMKUmUsrhRHNHQ3kF5NFcRXZFLJ 0MY8P5pLktfYqO5+l6i/jq+4odFEXrJR+DYaz74A4KUT3VJhpKKIWHNFqYm1UtGuOoGoRyAuEXto pWNc7rfa23VZZXEyjEeWjmE+gOLha9joXGen6l/FG/NLIyfJDQZ9LmMaOiKCvnTKxwegPF2KhQGA E/A5mc9Yp/f7cO/CU4/Ydp0wx1cPlDvfZnrPHQ== )`
	RRSIG=10427 and DNSKEY=10427 verifies the DNSKEY RRset
	RRSIG=35355 and DNSKEY=35355/SEP verifies the DNSKEY RRset
	DNSKEY=10427 is now in the chain-of-trust
	Query to ns3.nih.GOV for medlineplus.awsprod.nlm.nih.GOV/A
	Received 621 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (621 bytes) ;; HEADER SECTION ;; id = 9117 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.GOV. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.GOV. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 86400 IN NS ns-1890.awsdns-44.co.uk. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN NSEC3 ( 1 0 10 - a5p8l4na5fr3gmi0rc17krbdunipag5j NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN RRSIG ( NSEC3 7 4 3600 20200727113014 20200627112514 18339 nlm.nih.gov. OXxR+Y7yLhDB+x+fUl6UzS+G1LUkdDgETX/x4ODTLZX9mI3YQ3rEvU9HrFdZTUsF6mf2vxqmbg2u dJoLSmBXyuEsSandonVk2rh0uy0C05lg5ysFQD6KQhwvxg+wje9dxtBr4l9Wbo9qcNq8KEltJwPe P+14BUdWDXE/YAgfsUs= ) ;; ADDITIONAL SECTION (9 records) ns-226.awsdns-28.com. 58019 IN A 205.251.192.226 ns-1125.awsdns-12.org. 58055 IN A 205.251.196.101 ns-1890.awsdns-44.co.uk. 60253 IN A 205.251.199.98 ns-584.awsdns-09.net. 59539 IN A 205.251.194.72 ns-226.awsdns-28.com. 57855 IN AAAA 2600:9000:5300:e200::1 ns-1125.awsdns-12.org. 59175 IN AAAA 2600:9000:5304:6500::1 ns-1890.awsdns-44.co.uk. 57989 IN AAAA 2600:9000:5307:6200::1 ns-584.awsdns-09.net. 59281 IN AAAA 2600:9000:5302:4800::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nih.GOV for nlm.nih.GOV/DNSKEY
	Received 934 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (934 bytes) ;; HEADER SECTION ;; id = 65218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nlm.nih.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbukPSEDHxMAwAeNYoEeSKLsT4QMflPpgT1wS9GYNdyu2cRJb0IO1PAG8fYEpPSaLEkeGxbQ PIipfHVZZpOBI7/I1ySB92aqJxfh+d8e8OopcMyX19g5E/2zZDQvWQfX9U9iHtNOqATo8cYG612D oKtb1QIZiPcUj9StUtF5u+4FENZaZowOwYQ/pcsApQy/Jj8t4vBQbFM4S9EA5Brop+3iCngd9fjA o09CbWr8MkzhUOsroB6ocMAUtYR3WaHeLrf1GxBH2I/GA+AtDzmWhfa4OtEo/ADa8KdiMR7Iwge+ W9W73zjHdxTsWdpMuG3UT7QKhIdc0mnXtjV750RixMM= ) ; Key ID = 43224 nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAdhNvSIhKWCv26JHL4mZpfj1/3uhKrdAqP76sab/hWwsK5kGy2WZgZkHQa/jMJQ9ZjWuhNsf c+o3UyDOGFIL0zTS6aLSmhpGmPDyQOT+18UThhaHqvUvSek+MBxcNcDfBX69e4KN4gw4dcsUmKZZ 4NY3cTBua7M7X9yREQ13iXHL ) ; Key ID = 18339 nlm.nih.GOV. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200730113013 20200630103013 18339 nlm.nih.gov. gTuL2eD0/m8RzNqyWyS8/EdibAfoJZRk2YzUtYvllZxos7aESpIFMoQdgTNxoi6kHOMsbUWpTqvf yVKvQB5x2TTy2Uk46ivT1tL3q6bzgnfkfqXXTdQhjqRNCDEkXwnrwBzWE7dgu+sCMKMyfnNMM1O7 vHHRjQlqBK4BnkJztxo= ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200730113013 20200630103013 43224 nlm.nih.gov. tE/5wT0kDMO1Y02jqCMyxdv9a5Zc9N21PtR6SSGI8RYXCoPvdtPJORHdtlfP+XaBi+as8WYOxOrq bYAYhcRsCKmmH2sjfaHu+9J2qgXKTseN+sLZ0Poawfhd3t/sJ8fQDh7sTMFs1Jy58rVJ2iP5Qhho k3e7yeeawuuHMv81jbY+YMldBs619ErkAGGdi1UjacDN5fh8PR8ekEYN4bodCa6S++dCdLFVWUfR Bi9DRVaLb+difX9kJDGQCcFy1hAJujLuXEHtPZyCzO9m7pOeRTe0KkHMbngA5awaVLK1N8LvvGX0 Eua/oUj6WRBEXbALMBVVzTduItcy50jYXsehRg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nlm.nih.GOV
	Attempting to learn nameservers for nlm.nih.GOV
	Query to ns.nih.GOV for nlm.nih.GOV/NS
	Received 306 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (306 bytes) ;; HEADER SECTION ;; id = 45374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN NS ;; ANSWER SECTION (6 records) nlm.nih.GOV. 3600 IN NS ns2.nih.GOV. nlm.nih.GOV. 3600 IN NS ns3.nih.GOV. nlm.nih.GOV. 3600 IN NS ns.nih.GOV. nlm.nih.GOV. 3600 IN NS lhcns1.nlm.nih.GOV. nlm.nih.GOV. 3600 IN NS lhcns2.nlm.nih.GOV. nlm.nih.GOV. 3600 IN RRSIG ( NS 7 3 3600 20200727113014 20200627112514 18339 nlm.nih.gov. PfUUPkd21nUzphU4XMbyt8TZy1N+TJUe510VTklmTYv2yfXEMtuC5wD75yjGrWDQ0uSJkNn5KDpa qAWpjiDbMmSKKqcB/JGwksNwlYmFeAHk4NwXdNfIN0hsaXWZuboTbpq2Aigd5mBhrW0ycpk0AICc yOR4PvpjUiYEL3ifI0U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found nlm.nih.GOV nameservers: ns2.nih.GOV, ns3.nih.GOV, ns.nih.GOV, lhcns1.nlm.nih.GOV, lhcns2.nlm.nih.GOV

nlm.nih.GOV

	Checking DS between nih.GOV and nlm.nih.GOV
	Query to ns3.nih.GOV for nlm.nih.GOV/DS
	Received 303 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (303 bytes) ;; HEADER SECTION ;; id = 36399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DS ;; ANSWER SECTION (3 records) nlm.nih.GOV. 7200 IN DS ( 43224 7 2 862ca6cc23d78edfe7a5c846328bc0521627f48ac06a601df8d462251969b28a ) nlm.nih.GOV. 7200 IN DS ( 14674 7 2 fd00329146ac9c30acaab5edfa9f8b56b548b6e3dd66a11d2505ecb471807d80 ) nlm.nih.GOV. 7200 IN RRSIG ( DS 7 3 7200 20200708111842 20200704110805 10427 nih.gov. doEIISHT4hloCy+sTnD1EKDBUIDgG/wluZ9w8UwLbMU0EEZOQZJ9AlNTWN3s22U7tYTIHZ6A4GCY 9w21UJpu8zfH9+iTA7Jq32MmK/caWro8gu1PciaZDEwua5Jktw6ZT5/4RN7alEXCCkhakjDxKcgo x9px+hYdk6bu+Nh7yyo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for nlm.nih.GOV in the nih.GOV zone
	DS=43224/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=14674/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`nlm.nih.GOV. 7200 IN RRSIG ( DS 7 3 7200 20200708111842 20200704110805 10427 nih.gov. doEIISHT4hloCy+sTnD1EKDBUIDgG/wluZ9w8UwLbMU0EEZOQZJ9AlNTWN3s22U7tYTIHZ6A4GCY 9w21UJpu8zfH9+iTA7Jq32MmK/caWro8gu1PciaZDEwua5Jktw6ZT5/4RN7alEXCCkhakjDxKcgo x9px+hYdk6bu+Nh7yyo= )`
	RRSIG=10427 and DNSKEY=10427 verifies the DS RRset
	DS=43224/SHA-256 is now in the chain-of-trust
	DS=14674/SHA-256 is now in the chain-of-trust
	`nlm.nih.GOV. 7200 IN DS ( 43224 7 2 862ca6cc23d78edfe7a5c846328bc0521627f48ac06a601df8d462251969b28a )`
	`nlm.nih.GOV. 7200 IN DS ( 14674 7 2 fd00329146ac9c30acaab5edfa9f8b56b548b6e3dd66a11d2505ecb471807d80 )`
	Query to ns2.nih.GOV for nlm.nih.GOV/DNSKEY
	Received 934 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (934 bytes) ;; HEADER SECTION ;; id = 23507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAdhNvSIhKWCv26JHL4mZpfj1/3uhKrdAqP76sab/hWwsK5kGy2WZgZkHQa/jMJQ9ZjWuhNsf c+o3UyDOGFIL0zTS6aLSmhpGmPDyQOT+18UThhaHqvUvSek+MBxcNcDfBX69e4KN4gw4dcsUmKZZ 4NY3cTBua7M7X9yREQ13iXHL ) ; Key ID = 18339 nlm.nih.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbukPSEDHxMAwAeNYoEeSKLsT4QMflPpgT1wS9GYNdyu2cRJb0IO1PAG8fYEpPSaLEkeGxbQ PIipfHVZZpOBI7/I1ySB92aqJxfh+d8e8OopcMyX19g5E/2zZDQvWQfX9U9iHtNOqATo8cYG612D oKtb1QIZiPcUj9StUtF5u+4FENZaZowOwYQ/pcsApQy/Jj8t4vBQbFM4S9EA5Brop+3iCngd9fjA o09CbWr8MkzhUOsroB6ocMAUtYR3WaHeLrf1GxBH2I/GA+AtDzmWhfa4OtEo/ADa8KdiMR7Iwge+ W9W73zjHdxTsWdpMuG3UT7QKhIdc0mnXtjV750RixMM= ) ; Key ID = 43224 nlm.nih.GOV. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200730113013 20200630103013 18339 nlm.nih.gov. gTuL2eD0/m8RzNqyWyS8/EdibAfoJZRk2YzUtYvllZxos7aESpIFMoQdgTNxoi6kHOMsbUWpTqvf yVKvQB5x2TTy2Uk46ivT1tL3q6bzgnfkfqXXTdQhjqRNCDEkXwnrwBzWE7dgu+sCMKMyfnNMM1O7 vHHRjQlqBK4BnkJztxo= ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200730113013 20200630103013 43224 nlm.nih.gov. tE/5wT0kDMO1Y02jqCMyxdv9a5Zc9N21PtR6SSGI8RYXCoPvdtPJORHdtlfP+XaBi+as8WYOxOrq bYAYhcRsCKmmH2sjfaHu+9J2qgXKTseN+sLZ0Poawfhd3t/sJ8fQDh7sTMFs1Jy58rVJ2iP5Qhho k3e7yeeawuuHMv81jbY+YMldBs619ErkAGGdi1UjacDN5fh8PR8ekEYN4bodCa6S++dCdLFVWUfR Bi9DRVaLb+difX9kJDGQCcFy1hAJujLuXEHtPZyCzO9m7pOeRTe0KkHMbngA5awaVLK1N8LvvGX0 Eua/oUj6WRBEXbALMBVVzTduItcy50jYXsehRg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nlm.nih.GOV
	`nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAdhNvSIhKWCv26JHL4mZpfj1/3uhKrdAqP76sab/hWwsK5kGy2WZgZkHQa/jMJQ9ZjWuhNsf c+o3UyDOGFIL0zTS6aLSmhpGmPDyQOT+18UThhaHqvUvSek+MBxcNcDfBX69e4KN4gw4dcsUmKZZ 4NY3cTBua7M7X9yREQ13iXHL ) ; Key ID = 18339`
	`nlm.nih.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbukPSEDHxMAwAeNYoEeSKLsT4QMflPpgT1wS9GYNdyu2cRJb0IO1PAG8fYEpPSaLEkeGxbQ PIipfHVZZpOBI7/I1ySB92aqJxfh+d8e8OopcMyX19g5E/2zZDQvWQfX9U9iHtNOqATo8cYG612D oKtb1QIZiPcUj9StUtF5u+4FENZaZowOwYQ/pcsApQy/Jj8t4vBQbFM4S9EA5Brop+3iCngd9fjA o09CbWr8MkzhUOsroB6ocMAUtYR3WaHeLrf1GxBH2I/GA+AtDzmWhfa4OtEo/ADa8KdiMR7Iwge+ W9W73zjHdxTsWdpMuG3UT7QKhIdc0mnXtjV750RixMM= ) ; Key ID = 43224`
	DNSKEY=43224/SEP is now in the chain-of-trust
	DS=43224/SHA-256 verifies DNSKEY=43224/SEP
	DS=14674/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`nlm.nih.GOV. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200730113013 20200630103013 18339 nlm.nih.gov. gTuL2eD0/m8RzNqyWyS8/EdibAfoJZRk2YzUtYvllZxos7aESpIFMoQdgTNxoi6kHOMsbUWpTqvf yVKvQB5x2TTy2Uk46ivT1tL3q6bzgnfkfqXXTdQhjqRNCDEkXwnrwBzWE7dgu+sCMKMyfnNMM1O7 vHHRjQlqBK4BnkJztxo= )`
	`nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200730113013 20200630103013 43224 nlm.nih.gov. tE/5wT0kDMO1Y02jqCMyxdv9a5Zc9N21PtR6SSGI8RYXCoPvdtPJORHdtlfP+XaBi+as8WYOxOrq bYAYhcRsCKmmH2sjfaHu+9J2qgXKTseN+sLZ0Poawfhd3t/sJ8fQDh7sTMFs1Jy58rVJ2iP5Qhho k3e7yeeawuuHMv81jbY+YMldBs619ErkAGGdi1UjacDN5fh8PR8ekEYN4bodCa6S++dCdLFVWUfR Bi9DRVaLb+difX9kJDGQCcFy1hAJujLuXEHtPZyCzO9m7pOeRTe0KkHMbngA5awaVLK1N8LvvGX0 Eua/oUj6WRBEXbALMBVVzTduItcy50jYXsehRg== )`
	RRSIG=18339 and DNSKEY=18339 verifies the DNSKEY RRset
	RRSIG=43224 and DNSKEY=43224/SEP verifies the DNSKEY RRset
	DNSKEY=18339 is now in the chain-of-trust
	Query to ns.nih.GOV for medlineplus.awsprod.nlm.nih.GOV/A
	Received 605 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (605 bytes) ;; HEADER SECTION ;; id = 29395 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.GOV. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.GOV. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 86400 IN NS ns-1890.awsdns-44.co.uk. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN NSEC3 ( 1 0 10 - a5p8l4na5fr3gmi0rc17krbdunipag5j NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN RRSIG ( NSEC3 7 4 3600 20200727113014 20200627112514 18339 nlm.nih.gov. OXxR+Y7yLhDB+x+fUl6UzS+G1LUkdDgETX/x4ODTLZX9mI3YQ3rEvU9HrFdZTUsF6mf2vxqmbg2u dJoLSmBXyuEsSandonVk2rh0uy0C05lg5ysFQD6KQhwvxg+wje9dxtBr4l9Wbo9qcNq8KEltJwPe P+14BUdWDXE/YAgfsUs= ) ;; ADDITIONAL SECTION (8 records) ns-226.awsdns-28.com. 57855 IN A 205.251.192.226 ns-1125.awsdns-12.org. 60269 IN A 205.251.196.101 ns-1890.awsdns-44.co.uk. 57395 IN A 205.251.199.98 ns-226.awsdns-28.com. 58019 IN AAAA 2600:9000:5300:e200::1 ns-1125.awsdns-12.org. 58250 IN AAAA 2600:9000:5304:6500::1 ns-1890.awsdns-44.co.uk. 57395 IN AAAA 2600:9000:5307:6200::1 ns-584.awsdns-09.net. 58147 IN AAAA 2600:9000:5302:4800::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.nih.GOV for awsprod.nlm.nih.GOV/DNSKEY
	Received 593 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (593 bytes) ;; HEADER SECTION ;; id = 61629 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.GOV. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 86400 IN NS ns-584.awsdns-09.net. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN NSEC3 ( 1 0 10 - a5p8l4na5fr3gmi0rc17krbdunipag5j NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN RRSIG ( NSEC3 7 4 3600 20200727113014 20200627112514 18339 nlm.nih.gov. OXxR+Y7yLhDB+x+fUl6UzS+G1LUkdDgETX/x4ODTLZX9mI3YQ3rEvU9HrFdZTUsF6mf2vxqmbg2u dJoLSmBXyuEsSandonVk2rh0uy0C05lg5ysFQD6KQhwvxg+wje9dxtBr4l9Wbo9qcNq8KEltJwPe P+14BUdWDXE/YAgfsUs= ) ;; ADDITIONAL SECTION (8 records) ns-226.awsdns-28.com. 57855 IN A 205.251.192.226 ns-1125.awsdns-12.org. 60269 IN A 205.251.196.101 ns-1890.awsdns-44.co.uk. 57395 IN A 205.251.199.98 ns-226.awsdns-28.com. 58019 IN AAAA 2600:9000:5300:e200::1 ns-1125.awsdns-12.org. 58250 IN AAAA 2600:9000:5304:6500::1 ns-1890.awsdns-44.co.uk. 57395 IN AAAA 2600:9000:5307:6200::1 ns-584.awsdns-09.net. 58147 IN AAAA 2600:9000:5302:4800::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone awsprod.nlm.nih.GOV

awsprod.nlm.nih.GOV

	Checking DS between nlm.nih.GOV and awsprod.nlm.nih.GOV
	Query to ns2.nih.GOV for awsprod.nlm.nih.GOV/DS
	Received 529 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (529 bytes) ;; HEADER SECTION ;; id = 17754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlm.nih.GOV. 3600 IN SOA ( lhcns1.nlm.nih.GOV. nlmdnshostmaster.mail.nih.GOV. 612253838 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nlm.nih.GOV. 3600 IN RRSIG ( SOA 7 3 3600 20200801201418 20200702191418 18339 nlm.nih.gov. Cyiq4EVfWZcCVZ/q6U+lF2orfUU3geX4HCQ3OxfNoh17OlVAxmhNUPWWlRTQXfSA/U5Ju7PMfkN/ 3aH1//hqCClbLTdfYOmjXpqqd4eJVZc8su81KTQVUPjpDG7jgQreI6hGLAnfe9kL6LL7iWPWcZcW uFCdnkL8IJBl17Y4fuk= ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a5p8l4na5fr3gmi0rc17krbdunipag5j NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20200727113014 20200627112514 18339 nlm.nih.gov. OXxR+Y7yLhDB+x+fUl6UzS+G1LUkdDgETX/x4ODTLZX9mI3YQ3rEvU9HrFdZTUsF6mf2vxqmbg2u dJoLSmBXyuEsSandonVk2rh0uy0C05lg5ysFQD6KQhwvxg+wje9dxtBr4l9Wbo9qcNq8KEltJwPe P+14BUdWDXE/YAgfsUs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for awsprod.nlm.nih.GOV in the nlm.nih.GOV zone
	Query to ns-226.awsdns-28.com for awsprod.nlm.nih.GOV/DNSKEY
	Received 135 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (135 bytes) ;; HEADER SECTION ;; id = 64698 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-1890.awsdns-44.co.uk for medlineplus.awsprod.nlm.nih.GOV/A
	Received 264 bytes from 205.251.199.98
	;; Answer received from 205.251.199.98 (264 bytes) ;; HEADER SECTION ;; id = 41496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.249.40.44 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.249.40.16 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.249.40.78 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.249.40.95 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	awsprod.nlm.nih.GOV is authoritative for medlineplus.awsprod.nlm.nih.GOV
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.GOV/DNSKEY
	Received 147 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (147 bytes) ;; HEADER SECTION ;; id = 2116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1890.awsdns-44.co.uk for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.199.98
	;; Answer received from 205.251.199.98 (249 bytes) ;; HEADER SECTION ;; id = 53150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-584.awsdns-09.net for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.194.72
	;; Answer received from 205.251.194.72 (249 bytes) ;; HEADER SECTION ;; id = 44553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-226.awsdns-28.com for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (249 bytes) ;; HEADER SECTION ;; id = 8469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1125.awsdns-12.org for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.196.101
	;; Answer received from 205.251.196.101 (249 bytes) ;; HEADER SECTION ;; id = 53113 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1890.awsdns-44.co.uk for medlineplus.awsprod.nlm.nih.GOV/A
	Received 264 bytes from 205.251.199.98
	;; Answer received from 205.251.199.98 (264 bytes) ;; HEADER SECTION ;; id = 6968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.249.40.95 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.249.40.44 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.249.40.16 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.249.40.78 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	medlineplus.awsprod.nlm.nih.GOV A RR has value 13.249.40.95
	medlineplus.awsprod.nlm.nih.GOV A RR has value 13.249.40.44
	medlineplus.awsprod.nlm.nih.GOV A RR has value 13.249.40.16
	medlineplus.awsprod.nlm.nih.GOV A RR has value 13.249.40.78
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MEDLINEPLUS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: