DNSSEC Analyzer - MEDLINEPLUS.GOV

Domain Name:

Time: 2019-10-14 11:00:52 UTC, NTP stratum 4

Analyzing DNSSEC problems for MEDLINEPLUS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (864 bytes) ;; HEADER SECTION ;; id = 13902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to b.root-servers.net for MEDLINEPLUS.GOV/A
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for MEDLINEPLUS.GOV/A: 'IPv6 transport disabled'
	Received 673 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (673 bytes) ;; HEADER SECTION ;; id = 41544 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . VGx5wPlX1moEdWCpI0SIDF2DLpN3Dp1Gu1yTJVRCm08EnscX3vddSstQbZLOkXeJmocs5BSf446v 6JRkc2AvrZ/fc9+OZdx4OAZGWFwtiLQdeg5vJjGTUNnLTYTtJPZh7SsFRkMzf9ssO8QUr6vM0K2t /falnh0mwjZWUyCqYhQhtQRBzJEBPUUgINvoU4xDmDU5eWgxJxJuxUX6wShtdUUWnjufibRL9fl9 g/bGLqGbfFs3qSyvKhXeJHwSNwh6JwJGw8WQlUdIeJBMI0DWPgJyIH8JuMphIjWeBOjohLNgcFXz uAQH8cfHKTEJBD9FmF7oiDvD6pKveBHos3vjCA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 50273 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . VGx5wPlX1moEdWCpI0SIDF2DLpN3Dp1Gu1yTJVRCm08EnscX3vddSstQbZLOkXeJmocs5BSf446v 6JRkc2AvrZ/fc9+OZdx4OAZGWFwtiLQdeg5vJjGTUNnLTYTtJPZh7SsFRkMzf9ssO8QUr6vM0K2t /falnh0mwjZWUyCqYhQhtQRBzJEBPUUgINvoU4xDmDU5eWgxJxJuxUX6wShtdUUWnjufibRL9fl9 g/bGLqGbfFs3qSyvKhXeJHwSNwh6JwJGw8WQlUdIeJBMI0DWPgJyIH8JuMphIjWeBOjohLNgcFXz uAQH8cfHKTEJBD9FmF7oiDvD6pKveBHos3vjCA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (406 bytes) ;; HEADER SECTION ;; id = 19179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . VGx5wPlX1moEdWCpI0SIDF2DLpN3Dp1Gu1yTJVRCm08EnscX3vddSstQbZLOkXeJmocs5BSf446v 6JRkc2AvrZ/fc9+OZdx4OAZGWFwtiLQdeg5vJjGTUNnLTYTtJPZh7SsFRkMzf9ssO8QUr6vM0K2t /falnh0mwjZWUyCqYhQhtQRBzJEBPUUgINvoU4xDmDU5eWgxJxJuxUX6wShtdUUWnjufibRL9fl9 g/bGLqGbfFs3qSyvKhXeJHwSNwh6JwJGw8WQlUdIeJBMI0DWPgJyIH8JuMphIjWeBOjohLNgcFXz uAQH8cfHKTEJBD9FmF7oiDvD6pKveBHos3vjCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . VGx5wPlX1moEdWCpI0SIDF2DLpN3Dp1Gu1yTJVRCm08EnscX3vddSstQbZLOkXeJmocs5BSf446v 6JRkc2AvrZ/fc9+OZdx4OAZGWFwtiLQdeg5vJjGTUNnLTYTtJPZh7SsFRkMzf9ssO8QUr6vM0K2t /falnh0mwjZWUyCqYhQhtQRBzJEBPUUgINvoU4xDmDU5eWgxJxJuxUX6wShtdUUWnjufibRL9fl9 g/bGLqGbfFs3qSyvKhXeJHwSNwh6JwJGw8WQlUdIeJBMI0DWPgJyIH8JuMphIjWeBOjohLNgcFXz uAQH8cfHKTEJBD9FmF7oiDvD6pKveBHos3vjCA== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 889 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (889 bytes) ;; HEADER SECTION ;; id = 62500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019214731 20191004214231 7698 gov. E4bZ4ey1pa1MHvM50pmQREN2h6s76AhXbOSegaic7ywDl721xcHBq8+BTlPYGTugzHSlboys1Jgn 0SOHAw0ribaSAt44KhSlPTu5Qd2L92o7vV2s/YR+lJsQfQ+UFqbsZoiVjDLiamui2We2Nzav2nlq fqpk00XyvxoRLL4RsHVe1vfjdqNhsOpRXj6TJkF61nFK8fr1smp8wHvsVks8J8QHtKcpvACtpNAt UXZ9P5b/IKBAKlc4cpSvX60wWYYygmYLrfZJzZCxhaJXdDpGMs4ftWqErkRcWVaRPCVjY7FI48Xz 24qeMhj9uo/9H8ygNCpopSxnwqWKptoDEy2BlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019214731 20191004214231 7698 gov. E4bZ4ey1pa1MHvM50pmQREN2h6s76AhXbOSegaic7ywDl721xcHBq8+BTlPYGTugzHSlboys1Jgn 0SOHAw0ribaSAt44KhSlPTu5Qd2L92o7vV2s/YR+lJsQfQ+UFqbsZoiVjDLiamui2We2Nzav2nlq fqpk00XyvxoRLL4RsHVe1vfjdqNhsOpRXj6TJkF61nFK8fr1smp8wHvsVks8J8QHtKcpvACtpNAt UXZ9P5b/IKBAKlc4cpSvX60wWYYygmYLrfZJzZCxhaJXdDpGMs4ftWqErkRcWVaRPCVjY7FI48Xz 24qeMhj9uo/9H8ygNCpopSxnwqWKptoDEy2BlQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	DNSKEY=32795 is now in the chain-of-trust
	Query to b.gov-servers.net for MEDLINEPLUS.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for MEDLINEPLUS.GOV/A: 'IPv6 transport disabled'
	Received 494 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (494 bytes) ;; HEADER SECTION ;; id = 16328 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) MEDLINEPLUS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MEDLINEPLUS.GOV. 3600 IN DS ( 59154 7 2 3c83ea9190c37bd0e4a0afe6736d6b9a533258f2672067c5878c0daa4448d72b ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN DS ( 59154 7 1 36f196f2b3f2af9b3c57ac0a837227f2c243ec2f ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. mVmHXOizD1KGBarVQ5DLDz8OvbJhvxrz05E6FpKMgGdIUBkvaaIFTQDIBqLARsqX4aXrXxMZMrNT luYyVpWCXbTIdiu4L2WtyimE8UtqSC3ccO/22JYreY1ZhcJPkTzZu2r6lPc4mWi6aaqNOlaL9w8v BPI/x9W0ipQ5TM+BMaw= ) ;; ADDITIONAL SECTION (4 records) gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for MEDLINEPLUS.GOV/DNSKEY
	Received 494 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (494 bytes) ;; HEADER SECTION ;; id = 55284 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) MEDLINEPLUS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MEDLINEPLUS.GOV. 3600 IN DS ( 59154 7 2 3c83ea9190c37bd0e4a0afe6736d6b9a533258f2672067c5878c0daa4448d72b ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN DS ( 59154 7 1 36f196f2b3f2af9b3c57ac0a837227f2c243ec2f ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. mVmHXOizD1KGBarVQ5DLDz8OvbJhvxrz05E6FpKMgGdIUBkvaaIFTQDIBqLARsqX4aXrXxMZMrNT luYyVpWCXbTIdiu4L2WtyimE8UtqSC3ccO/22JYreY1ZhcJPkTzZu2r6lPc4mWi6aaqNOlaL9w8v BPI/x9W0ipQ5TM+BMaw= ) ;; ADDITIONAL SECTION (4 records) gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MEDLINEPLUS.GOV

MEDLINEPLUS.GOV

	Checking DS between GOV and MEDLINEPLUS.GOV
	Query to b.gov-servers.net for MEDLINEPLUS.GOV/DS
	Received 375 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (375 bytes) ;; HEADER SECTION ;; id = 48969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DS ;; ANSWER SECTION (5 records) MEDLINEPLUS.GOV. 3600 IN DS ( 59154 7 2 3c83ea9190c37bd0e4a0afe6736d6b9a533258f2672067c5878c0daa4448d72b ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN DS ( 59154 7 1 36f196f2b3f2af9b3c57ac0a837227f2c243ec2f ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. mVmHXOizD1KGBarVQ5DLDz8OvbJhvxrz05E6FpKMgGdIUBkvaaIFTQDIBqLARsqX4aXrXxMZMrNT luYyVpWCXbTIdiu4L2WtyimE8UtqSC3ccO/22JYreY1ZhcJPkTzZu2r6lPc4mWi6aaqNOlaL9w8v BPI/x9W0ipQ5TM+BMaw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for MEDLINEPLUS.GOV in the GOV zone
	DS=59154/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=30870/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=59154/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=30870/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. mVmHXOizD1KGBarVQ5DLDz8OvbJhvxrz05E6FpKMgGdIUBkvaaIFTQDIBqLARsqX4aXrXxMZMrNT luYyVpWCXbTIdiu4L2WtyimE8UtqSC3ccO/22JYreY1ZhcJPkTzZu2r6lPc4mWi6aaqNOlaL9w8v BPI/x9W0ipQ5TM+BMaw= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=59154/SHA-256 is now in the chain-of-trust
	DS=30870/SHA-1 is now in the chain-of-trust
	`MEDLINEPLUS.GOV. 3600 IN DS ( 59154 7 2 3c83ea9190c37bd0e4a0afe6736d6b9a533258f2672067c5878c0daa4448d72b )`
	`MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 )`
	`MEDLINEPLUS.GOV. 3600 IN DS ( 59154 7 1 36f196f2b3f2af9b3c57ac0a837227f2c243ec2f )`
	`MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce )`
	Query to gslb02.nlm.nih.GOV for MEDLINEPLUS.GOV/DNSKEY
	Error querying gslb02.nlm.nih.GOV/2607:f220:41f:1405:0:0:0:3 for MEDLINEPLUS.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2360 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (2360 bytes) ;; HEADER SECTION ;; id = 42064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaOAYYmSm91BfepYEbUgRr6U5/sa2lEoIhAUVYIhJla5bSrwogifit0DTNNScP11NaJ5u6Ys ur/11Dn/XI42V/yu2KZzag8BaIU7rTFHSRXReYnxcpmdATsn9rqT0JxyYrvZHSaAK9saIKU1zDLU nZwEDKhBfiz5/xMkEwaI5RI3sjiMLRIWuhEuQ/gTIL3jGncWDtSlCdmFmCQUjaYi7p2TCcIg9gl6 baIjxWWr01W7ViUKac9AvfklljJ8bRzWgAlRoJN9TcWlVEP430rOiOLrCGgyXRAFH7y2hLUt3B7s vc8Lod5P+weyRr+m93OUtF4N1SBzkgS/yOeGam94KsE= ) ; Key ID = 59154 MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAc9XflNiZCBGHpwTw6pHrnuwI0vTvwGsJBUFAKAU+q51Ra4q7s/bgbbOEFdAOdzdNDWovj0Y ZJ2aHOUIA/P28xn0rVJt4z8TAYqOEMyxeUgaDABpbfsEAKmSVTRj9D5wf0ImLdCDLzUykAhdH13R RgRtsDTIcXa+xQ3zapIkLKF7zJchLxlpVkQPBpeMw2rF2mrYNv1wM9Pzf7gieIqnAyHRVZ+eymV2 UeyurHh3vMOO4PmXUI5mMIuKscvTihOvj6MmBW7t5CbMAkVA6Hymt1Eold1IhVHx+HxzTuwQ98nx hsjqzBEEvFMY0g4aFVi/rrxc/8OejYwwWyhRqR3Ls18= ) ; Key ID = 30870 MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAe4w+wI9jqKAySBOkNxxevq4ta8acbSXLrsA/UX3OeNY+M0i+7h7WeJzZSaLMBNMI/a1GU+G QsE+GJwoIjzTolduTCfFzO5zVWDgOm9TjYX6sVGyGsWwMuvYTpGsgdkfo9PwU+Rch35dnLrcSSEw i8uKyCWKkeb7sqi6ZVo1D62q9X4+8LIRJlcRlioGIcvnWMLTAO4IMNDFDRKcRvDGfYRv/gW39YzE ijFHPfVTfv9BP4YffvWM+8+gIL8iUOYsNLxC50Vjgu+V4SgIXXNFonBe6ghRSqEunQQyX24c7PpL ZFtPkEkGsHO26MWTFkCPJY8PMMHXaq+4ZukZWHXvS7k= ) ; Key ID = 54953 MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAblrLAPr4kvce/QDkcRIf86BXFgJAFGWt4Kmfp6+npCkf6E0RtmumunRVB6tMKhgVdqykCF8 yjFQ75D3XRffLVQkY/enq6J3y5xtDG5dhe6bt5CmZ4p3XDRaiqMWWV7RMP0UErMo5Xhupy7xXDvb Vqrh3DOrN75MDp5CWk8egA6yOTCNXXupSv+5jdRjkjnM297W8JE9Dl3N3EPNT/gpcQWSY75cFLGv 653++GbVu00TBQ9+Q6Csq5ZybgbFW0Z+WrmaASsceO9jUKX1weNOqsMPHgWuPdfQY+SM5oI94mTc 1U5mEjkBXZSzavedEero+f+J+PnRulLmbA/NJoHAsNE= ) ; Key ID = 59630 MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191103005357 20191013005357 59154 medlineplus.gov. dxoTzNhYKG2wtlCtxK3YJ+tgF8JV4IDE32dQkvq9tobv9YEReBQWXIeP8ONtgpxA5ZvOz6AoS15z ONsYYZeRmBwQTispM2m/8DIrX95ovUNZCYVjjIimV7pYZwzUfKHki8Ryu+rNQr+V8v0YNwKzHlzo N21PrqIyWGBw+YFm14Jz9zjwI7Eq4CIHWsGN34IKBVWCyqAJwOdwo300StkZJ2Dexq3e2wSuElby YpoG76AM6WeKJscbvW5134SqM0F7zzEAgT5pjYA4SAd7E9/MpWbI9jnAzBlEpFnU7zbna8liWoE7 WgxWQWQsyBG9YOl9dJQlNewAGxfejB7A1AGOog== ) MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191103005357 20191013005357 30870 medlineplus.gov. AmP4tL48cYJjOTPkVixQoDJg/mkqRDEWyzR/mpk8XtmDySeddcLmgFlB/GhCpkHiJgaI5QqDoM6g sm9DREAXBkSZcUPtZGljZpdhU5kI6KBwosCsS2SZSzcE6Wztp/fXfXt4TO41s8/V8fdldptSEwKU D60aoCISlx5K1jRsX+Ytx/4EZlpYljWDoXdcqCDHBmQZ0n7imw5fMUD2J/kQ78yR/v5uSdxhcedW L06JZJYvugpLWO7ohUlzYwtgA86LcQWIB1/YSz1IsP7644g3o6z/mHDzmsJ1NPAv00kP5o6sroZM i2S/3aPJyd6PCBpa1iLt6KPs+nJr4OCGCuxs3g== ) MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191102165404 20191012165404 54953 medlineplus.gov. uVZV0mXBEhEdhCoU7QHsSlz44Ue0eE0JZgpta2m2x8vNinDu5QwGb889fRoKfhaA2ncv+l3gLt0r P9S9hJQ7t9CbvO+4wCi2wiQMbO20Z2gr/nlv9Dw2yy09dpbNbOFQKjL71c8YEYDU32tmFTMYS9eG BVU1C4KD1kcYxDxYviCBCXgU5wYqrDBGAugHGsatWf0rgUOGctO6Q6D587iozDxlXvkyFvNmSE9c uDmplHMIMONI1hRSt4q100k1Lb1mWeMx//caIx2Ae730U1atvyD3HhPAb63/H0/8ka12PkMa/b1Y Sd5X1/M7rXkCPNA9O7ZFbkIwSUd8/cnvCJtrIQ== ) MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191102165404 20191012165404 59630 medlineplus.gov. OamSP3R7CPxevK5mOhlasWIsBoa7LPMnF4PTmwXLV2YRx6z9bjdgPaWakrI0pxIS8AjRvC7YZXUs Rgz94MaO43COHGkmwRE+861uTyYAhCwL/iwQDHphE4YulHflhPPqNQLntcCudMLOkmDEjaQQk00G 3a7kN6j9EFAhlan8FVrWJ1uWgMObYHdZZKwOnk2mneaPd86A4WGAc7TtG1mFNdJOzcWKob1RyHWt ma3/jCukXi9Y1vcqxuediuCGvv+yFlitCKtdkJv6EZHnO8l6Ggf4OCr31gBXdXtxw4/3fiK4qtNb bYcLvmWAJPDwhQVgjqxjD+9+57msbuZWkEW/4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for MEDLINEPLUS.GOV
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaOAYYmSm91BfepYEbUgRr6U5/sa2lEoIhAUVYIhJla5bSrwogifit0DTNNScP11NaJ5u6Ys ur/11Dn/XI42V/yu2KZzag8BaIU7rTFHSRXReYnxcpmdATsn9rqT0JxyYrvZHSaAK9saIKU1zDLU nZwEDKhBfiz5/xMkEwaI5RI3sjiMLRIWuhEuQ/gTIL3jGncWDtSlCdmFmCQUjaYi7p2TCcIg9gl6 baIjxWWr01W7ViUKac9AvfklljJ8bRzWgAlRoJN9TcWlVEP430rOiOLrCGgyXRAFH7y2hLUt3B7s vc8Lod5P+weyRr+m93OUtF4N1SBzkgS/yOeGam94KsE= ) ; Key ID = 59154`
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAc9XflNiZCBGHpwTw6pHrnuwI0vTvwGsJBUFAKAU+q51Ra4q7s/bgbbOEFdAOdzdNDWovj0Y ZJ2aHOUIA/P28xn0rVJt4z8TAYqOEMyxeUgaDABpbfsEAKmSVTRj9D5wf0ImLdCDLzUykAhdH13R RgRtsDTIcXa+xQ3zapIkLKF7zJchLxlpVkQPBpeMw2rF2mrYNv1wM9Pzf7gieIqnAyHRVZ+eymV2 UeyurHh3vMOO4PmXUI5mMIuKscvTihOvj6MmBW7t5CbMAkVA6Hymt1Eold1IhVHx+HxzTuwQ98nx hsjqzBEEvFMY0g4aFVi/rrxc/8OejYwwWyhRqR3Ls18= ) ; Key ID = 30870`
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAe4w+wI9jqKAySBOkNxxevq4ta8acbSXLrsA/UX3OeNY+M0i+7h7WeJzZSaLMBNMI/a1GU+G QsE+GJwoIjzTolduTCfFzO5zVWDgOm9TjYX6sVGyGsWwMuvYTpGsgdkfo9PwU+Rch35dnLrcSSEw i8uKyCWKkeb7sqi6ZVo1D62q9X4+8LIRJlcRlioGIcvnWMLTAO4IMNDFDRKcRvDGfYRv/gW39YzE ijFHPfVTfv9BP4YffvWM+8+gIL8iUOYsNLxC50Vjgu+V4SgIXXNFonBe6ghRSqEunQQyX24c7PpL ZFtPkEkGsHO26MWTFkCPJY8PMMHXaq+4ZukZWHXvS7k= ) ; Key ID = 54953`
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAblrLAPr4kvce/QDkcRIf86BXFgJAFGWt4Kmfp6+npCkf6E0RtmumunRVB6tMKhgVdqykCF8 yjFQ75D3XRffLVQkY/enq6J3y5xtDG5dhe6bt5CmZ4p3XDRaiqMWWV7RMP0UErMo5Xhupy7xXDvb Vqrh3DOrN75MDp5CWk8egA6yOTCNXXupSv+5jdRjkjnM297W8JE9Dl3N3EPNT/gpcQWSY75cFLGv 653++GbVu00TBQ9+Q6Csq5ZybgbFW0Z+WrmaASsceO9jUKX1weNOqsMPHgWuPdfQY+SM5oI94mTc 1U5mEjkBXZSzavedEero+f+J+PnRulLmbA/NJoHAsNE= ) ; Key ID = 59630`
	DNSKEY=59154/SEP is now in the chain-of-trust
	DS=59154/SHA-256 verifies DNSKEY=59154/SEP
	DS=59154/SHA-1 verifies DNSKEY=59154/SEP
	DNSKEY=30870/SEP is now in the chain-of-trust
	DS=30870/SHA-1 verifies DNSKEY=30870/SEP
	DS=30870/SHA-256 verifies DNSKEY=30870/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191103005357 20191013005357 59154 medlineplus.gov. dxoTzNhYKG2wtlCtxK3YJ+tgF8JV4IDE32dQkvq9tobv9YEReBQWXIeP8ONtgpxA5ZvOz6AoS15z ONsYYZeRmBwQTispM2m/8DIrX95ovUNZCYVjjIimV7pYZwzUfKHki8Ryu+rNQr+V8v0YNwKzHlzo N21PrqIyWGBw+YFm14Jz9zjwI7Eq4CIHWsGN34IKBVWCyqAJwOdwo300StkZJ2Dexq3e2wSuElby YpoG76AM6WeKJscbvW5134SqM0F7zzEAgT5pjYA4SAd7E9/MpWbI9jnAzBlEpFnU7zbna8liWoE7 WgxWQWQsyBG9YOl9dJQlNewAGxfejB7A1AGOog== )`
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191103005357 20191013005357 30870 medlineplus.gov. AmP4tL48cYJjOTPkVixQoDJg/mkqRDEWyzR/mpk8XtmDySeddcLmgFlB/GhCpkHiJgaI5QqDoM6g sm9DREAXBkSZcUPtZGljZpdhU5kI6KBwosCsS2SZSzcE6Wztp/fXfXt4TO41s8/V8fdldptSEwKU D60aoCISlx5K1jRsX+Ytx/4EZlpYljWDoXdcqCDHBmQZ0n7imw5fMUD2J/kQ78yR/v5uSdxhcedW L06JZJYvugpLWO7ohUlzYwtgA86LcQWIB1/YSz1IsP7644g3o6z/mHDzmsJ1NPAv00kP5o6sroZM i2S/3aPJyd6PCBpa1iLt6KPs+nJr4OCGCuxs3g== )`
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191102165404 20191012165404 54953 medlineplus.gov. uVZV0mXBEhEdhCoU7QHsSlz44Ue0eE0JZgpta2m2x8vNinDu5QwGb889fRoKfhaA2ncv+l3gLt0r P9S9hJQ7t9CbvO+4wCi2wiQMbO20Z2gr/nlv9Dw2yy09dpbNbOFQKjL71c8YEYDU32tmFTMYS9eG BVU1C4KD1kcYxDxYviCBCXgU5wYqrDBGAugHGsatWf0rgUOGctO6Q6D587iozDxlXvkyFvNmSE9c uDmplHMIMONI1hRSt4q100k1Lb1mWeMx//caIx2Ae730U1atvyD3HhPAb63/H0/8ka12PkMa/b1Y Sd5X1/M7rXkCPNA9O7ZFbkIwSUd8/cnvCJtrIQ== )`
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191102165404 20191012165404 59630 medlineplus.gov. OamSP3R7CPxevK5mOhlasWIsBoa7LPMnF4PTmwXLV2YRx6z9bjdgPaWakrI0pxIS8AjRvC7YZXUs Rgz94MaO43COHGkmwRE+861uTyYAhCwL/iwQDHphE4YulHflhPPqNQLntcCudMLOkmDEjaQQk00G 3a7kN6j9EFAhlan8FVrWJ1uWgMObYHdZZKwOnk2mneaPd86A4WGAc7TtG1mFNdJOzcWKob1RyHWt ma3/jCukXi9Y1vcqxuediuCGvv+yFlitCKtdkJv6EZHnO8l6Ggf4OCr31gBXdXtxw4/3fiK4qtNb bYcLvmWAJPDwhQVgjqxjD+9+57msbuZWkEW/4w== )`
	RRSIG=59154 and DNSKEY=59154/SEP verifies the DNSKEY RRset
	RRSIG=30870 and DNSKEY=30870/SEP verifies the DNSKEY RRset
	RRSIG=54953 and DNSKEY=54953 verifies the DNSKEY RRset
	RRSIG=59630 and DNSKEY=59630 verifies the DNSKEY RRset
	DNSKEY=54953 is now in the chain-of-trust
	DNSKEY=59630 is now in the chain-of-trust
	Query to gslb02.nlm.nih.GOV for MEDLINEPLUS.GOV/A
	Error querying gslb02.nlm.nih.GOV/2607:f220:41f:1405:0:0:0:3 for MEDLINEPLUS.GOV/A: 'IPv6 transport disabled'
	Received 692 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (692 bytes) ;; HEADER SECTION ;; id = 45929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (3 records) MEDLINEPLUS.GOV. 30 IN CNAME medlineplus.awsprod.nlm.nih.GOV. MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20191027214958 20191006214958 54953 medlineplus.gov. J33Jhblt1MjFuvTk/xRNkNX1jw335+7TeOpBEmrzALGor8y19alZmaWnbNu0yd7AzEOou7iTtmcG B+B+K7HyPMf+wxA+fwl1YlJwGL4yaWAKTTJTX0jWFIGQC14S+WbXRPZF10ETf0+QGe+EC4SUMqBn vxTq2Dl32uUl72NoLjEr9BXihFd6sp/AhkIT1BRfXAtkGuVxK2uM/u6hLKwlN6nL4f5qPZZR7zoj 9n8eFtwYvxUbORhfmGYa9Fo1ekQ/yGDX6r6pYkg0IcwrReydRZMljAKHttFTu7dK8dURH0heEFbZ xAU+2g09NuxBrfXVDzyVQxyD4Dg0gfKbs9cdxA== ) MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20191102165355 20191012165355 59630 medlineplus.gov. D9AwZR6yS3Yc1XuPf+cDbblgvTxD94+RfCm+mlBpV+eQZxGeG1XrPrMzJKnsEN6fCRYuZ3BoQfeJ anpPbjxEShx9y5O2ck7X/hyV71qGErVwX5v7OUPnB8bD+nPDYGcMHtbXYuvIsEeE6fotP+S5jBvv /uLBhkTqTztJQpE1PE4L434avBGKyi7ccS29koOdMWHuzohHO/sXlgYjza9yKKPW52pCJxyw9KsV N02+M+f+VyKobUpsoWspDLibNjlumFTtLWtqEPgxwEziqHDbqdis3HnZLFBD/JbJyrEN36p7T6Yp phpDSU/G6ek4wmJ1SRm8xlV/EkBtlIOaV026xA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MEDLINEPLUS.GOV is authoritative for MEDLINEPLUS.GOV
	Found RRSIG signed by medlineplus.gov zone
	MEDLINEPLUS.GOV is a CNAME to medlineplus.awsprod.nlm.nih.GOV
	Found 2 RRSIGs over CNAME RRset
	`MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20191027214958 20191006214958 54953 medlineplus.gov. J33Jhblt1MjFuvTk/xRNkNX1jw335+7TeOpBEmrzALGor8y19alZmaWnbNu0yd7AzEOou7iTtmcG B+B+K7HyPMf+wxA+fwl1YlJwGL4yaWAKTTJTX0jWFIGQC14S+WbXRPZF10ETf0+QGe+EC4SUMqBn vxTq2Dl32uUl72NoLjEr9BXihFd6sp/AhkIT1BRfXAtkGuVxK2uM/u6hLKwlN6nL4f5qPZZR7zoj 9n8eFtwYvxUbORhfmGYa9Fo1ekQ/yGDX6r6pYkg0IcwrReydRZMljAKHttFTu7dK8dURH0heEFbZ xAU+2g09NuxBrfXVDzyVQxyD4Dg0gfKbs9cdxA== )`
	`MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20191102165355 20191012165355 59630 medlineplus.gov. D9AwZR6yS3Yc1XuPf+cDbblgvTxD94+RfCm+mlBpV+eQZxGeG1XrPrMzJKnsEN6fCRYuZ3BoQfeJ anpPbjxEShx9y5O2ck7X/hyV71qGErVwX5v7OUPnB8bD+nPDYGcMHtbXYuvIsEeE6fotP+S5jBvv /uLBhkTqTztJQpE1PE4L434avBGKyi7ccS29koOdMWHuzohHO/sXlgYjza9yKKPW52pCJxyw9KsV N02+M+f+VyKobUpsoWspDLibNjlumFTtLWtqEPgxwEziqHDbqdis3HnZLFBD/JbJyrEN36p7T6Yp phpDSU/G6ek4wmJ1SRm8xlV/EkBtlIOaV026xA== )`
	RRSIG=54953 and DNSKEY=54953 verifies the CNAME RRset
	RRSIG=59630 and DNSKEY=59630 verifies the CNAME RRset

GOV

	Query to a.gov-servers.net for medlineplus.awsprod.nlm.nih.GOV/A
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for medlineplus.awsprod.nlm.nih.GOV/A: 'IPv6 transport disabled'
	Received 492 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (492 bytes) ;; HEADER SECTION ;; id = 27091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nih.GOV. 86400 IN NS ns.nih.GOV. nih.GOV. 86400 IN NS ns3.nih.GOV. nih.GOV. 86400 IN NS ns2.nih.GOV. nih.GOV. 3600 IN DS ( 34839 7 2 99f550cf4568e7a8facb6ee8a1cbf32d94207265cfd53c5525e905ede5fb76ac ) nih.GOV. 3600 IN DS 34839 7 1 abb7c3b8674986ac735410a34ba16768e653d4a6 nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. P5owWFTJo3M2osI9YrvyqBzHdCCJ8hYEgspKTMoQ/u2F00vjl9ot1LPI3OiXxiSIHN1ltr2fwDC9 5dtkHH6XoA1KXP22JyAfx/axOeSXaRTWTpBossbfKHXj3mtLJR0ijFdd6UhyNJG2deuFJ0Dyi2y2 YRvcWI1G1WDWzowGclo= ) ;; ADDITIONAL SECTION (7 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for nih.GOV/DNSKEY
	Received 468 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (468 bytes) ;; HEADER SECTION ;; id = 9382 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nih.GOV. 86400 IN NS ns.nih.GOV. nih.GOV. 86400 IN NS ns3.nih.GOV. nih.GOV. 86400 IN NS ns2.nih.GOV. nih.GOV. 3600 IN DS ( 34839 7 2 99f550cf4568e7a8facb6ee8a1cbf32d94207265cfd53c5525e905ede5fb76ac ) nih.GOV. 3600 IN DS 34839 7 1 abb7c3b8674986ac735410a34ba16768e653d4a6 nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. P5owWFTJo3M2osI9YrvyqBzHdCCJ8hYEgspKTMoQ/u2F00vjl9ot1LPI3OiXxiSIHN1ltr2fwDC9 5dtkHH6XoA1KXP22JyAfx/axOeSXaRTWTpBossbfKHXj3mtLJR0ijFdd6UhyNJG2deuFJ0Dyi2y2 YRvcWI1G1WDWzowGclo= ) ;; ADDITIONAL SECTION (7 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nih.GOV

nih.GOV

	Checking DS between GOV and nih.GOV
	Query to a.gov-servers.net for nih.GOV/DS
	Received 283 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (283 bytes) ;; HEADER SECTION ;; id = 32774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DS ;; ANSWER SECTION (3 records) nih.GOV. 3600 IN DS ( 34839 7 2 99f550cf4568e7a8facb6ee8a1cbf32d94207265cfd53c5525e905ede5fb76ac ) nih.GOV. 3600 IN DS 34839 7 1 abb7c3b8674986ac735410a34ba16768e653d4a6 nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. P5owWFTJo3M2osI9YrvyqBzHdCCJ8hYEgspKTMoQ/u2F00vjl9ot1LPI3OiXxiSIHN1ltr2fwDC9 5dtkHH6XoA1KXP22JyAfx/axOeSXaRTWTpBossbfKHXj3mtLJR0ijFdd6UhyNJG2deuFJ0Dyi2y2 YRvcWI1G1WDWzowGclo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for nih.GOV in the GOV zone
	DS=34839/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=34839/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. P5owWFTJo3M2osI9YrvyqBzHdCCJ8hYEgspKTMoQ/u2F00vjl9ot1LPI3OiXxiSIHN1ltr2fwDC9 5dtkHH6XoA1KXP22JyAfx/axOeSXaRTWTpBossbfKHXj3mtLJR0ijFdd6UhyNJG2deuFJ0Dyi2y2 YRvcWI1G1WDWzowGclo= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=34839/SHA-256 is now in the chain-of-trust
	`nih.GOV. 3600 IN DS ( 34839 7 2 99f550cf4568e7a8facb6ee8a1cbf32d94207265cfd53c5525e905ede5fb76ac )`
	`nih.GOV. 3600 IN DS 34839 7 1 abb7c3b8674986ac735410a34ba16768e653d4a6`
	Query to ns2.nih.GOV for nih.GOV/DNSKEY
	Error querying ns2.nih.GOV/2607:f220:418:4101:0:0:80e7:401 for nih.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1185 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (1185 bytes) ;; HEADER SECTION ;; id = 21808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAbGC88JiOkHFrhOAKQDxOb02U5q2VPfjV9MIjmvX8aut7S1Us383t3dVnecV7KeZOmWuBbI7 mjaZxB/O/h2XARI/PaedF/t0sZTEHUBCDWhP/UaNyT3xhmCJMJvPal0kCaUnN5fhcb/QYcPIil5/ E5zKWyO24abyOx+dlzq2XxY+3eWRTkUAC6j2d8hunUS64SdUj9pxBI4TU+L1EWsTJhkg062oActY JOYT3XBi8UclC84zD4YCw0UHpaRmnxImQicXgPeN78snBlHMowEVwwiGfGdExYxUjcI82EGcOTKa CM5Nv/uKySGptP1VkVIhW0Jrq7qXkvlskI2tNdkf9Ps= ) ; Key ID = 42218 nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAcKBJr0URFfVB01LooA1/oh6nQMQ6lBU5iIbKMoKL8Or+hb69mlYvEUYvxIdfvlF9/whMHcG 0zOU/EC5pXnYcAzUTgWt46AxzNgDK8FXjtcTfOU9GpmVoTlnvwy7RpLfjX++5YmWOt6AkbDBlxZj rpglRWniPCK8NnTY8T+l5EhMNlwiNvEBneOnvS5anLOKOryaTrR547PvNoW0DnuazTsxPdw05aQb fooop+N4dtXBmlUONQOU83g8CyRVcM4BHqM6GZPSFHkqBJV9RJVYlYfuh7xFG9PzJeQqTDSEdZoK y71Hz6Msc2iDq4ljJAk+9kZifCaX9qh4SB56hqhT3Hs= ) ; Key ID = 34839 nih.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200109170538 20191011170538 34839 nih.gov. BSVElyq6nkSX1jQIssyqHJBj44soIOxdhSsNwBvyZWe6gQF1A7Udg1LFh7ykpVrsz0agMrJ+C+wP jFl7SJD64dj9HqNEbMnPo1B7eyPh9XfCsLaZsFChJxcbYoPAxc0KxtvKE4crcbolTKsn5tb5ZgLd 6ZEAc8WLPyb7JFvVpe/9LW0LNKG/3GUADzDV7nC7+pvzwkRRay3N4hC4KU3aMoKqa1r8LgwJ6sTM kEYTJGxTmIF+QCXdELzdjhFQGqEiuQ9i8qiGj6yuDu/U1tpCRLf+b9h0p8TyVjqiPiTOhsddCZzC 92ioc+CXzYi3kombzqjJUyqzQcaUWWeAtQFtFA== ) nih.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200109170538 20191011170538 42218 nih.gov. jTZNQGIni1v1fFLgzQfJ+y6Vu1nXQNsHlT1psXV2owk7oiLbRQ/2/DAjUHmswD40HRrz6nrjJBtC GQa1K74G11XoU6qMxFk8lL0kKjqV9IVBNdLluktm5hTkI3ZiUMKt1aWoyOjws7PWnk5ErR3Y3c+y IdwNu0cu63MyyzXZtImCJJzFXEdl3b/SVGKOvwGNojzabk2ZLImsoJXe3DaPnHOsQahaOrbXw6QR zeR3IKA/84Wy6AIeWaYfSDlA27Fz26G/67y9Kf9KGE3ZGws0szGIPoroBXVBoIZXGLz6gOGJ+bIV j88NE3xCnEl6E7jesObRB9Fam19o4QIHGaoSmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nih.GOV
	`nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAbGC88JiOkHFrhOAKQDxOb02U5q2VPfjV9MIjmvX8aut7S1Us383t3dVnecV7KeZOmWuBbI7 mjaZxB/O/h2XARI/PaedF/t0sZTEHUBCDWhP/UaNyT3xhmCJMJvPal0kCaUnN5fhcb/QYcPIil5/ E5zKWyO24abyOx+dlzq2XxY+3eWRTkUAC6j2d8hunUS64SdUj9pxBI4TU+L1EWsTJhkg062oActY JOYT3XBi8UclC84zD4YCw0UHpaRmnxImQicXgPeN78snBlHMowEVwwiGfGdExYxUjcI82EGcOTKa CM5Nv/uKySGptP1VkVIhW0Jrq7qXkvlskI2tNdkf9Ps= ) ; Key ID = 42218`
	`nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAcKBJr0URFfVB01LooA1/oh6nQMQ6lBU5iIbKMoKL8Or+hb69mlYvEUYvxIdfvlF9/whMHcG 0zOU/EC5pXnYcAzUTgWt46AxzNgDK8FXjtcTfOU9GpmVoTlnvwy7RpLfjX++5YmWOt6AkbDBlxZj rpglRWniPCK8NnTY8T+l5EhMNlwiNvEBneOnvS5anLOKOryaTrR547PvNoW0DnuazTsxPdw05aQb fooop+N4dtXBmlUONQOU83g8CyRVcM4BHqM6GZPSFHkqBJV9RJVYlYfuh7xFG9PzJeQqTDSEdZoK y71Hz6Msc2iDq4ljJAk+9kZifCaX9qh4SB56hqhT3Hs= ) ; Key ID = 34839`
	DNSKEY=34839/SEP is now in the chain-of-trust
	DS=34839/SHA-256 verifies DNSKEY=34839/SEP
	DS=34839/SHA-1 verifies DNSKEY=34839/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`nih.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200109170538 20191011170538 34839 nih.gov. BSVElyq6nkSX1jQIssyqHJBj44soIOxdhSsNwBvyZWe6gQF1A7Udg1LFh7ykpVrsz0agMrJ+C+wP jFl7SJD64dj9HqNEbMnPo1B7eyPh9XfCsLaZsFChJxcbYoPAxc0KxtvKE4crcbolTKsn5tb5ZgLd 6ZEAc8WLPyb7JFvVpe/9LW0LNKG/3GUADzDV7nC7+pvzwkRRay3N4hC4KU3aMoKqa1r8LgwJ6sTM kEYTJGxTmIF+QCXdELzdjhFQGqEiuQ9i8qiGj6yuDu/U1tpCRLf+b9h0p8TyVjqiPiTOhsddCZzC 92ioc+CXzYi3kombzqjJUyqzQcaUWWeAtQFtFA== )`
	`nih.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200109170538 20191011170538 42218 nih.gov. jTZNQGIni1v1fFLgzQfJ+y6Vu1nXQNsHlT1psXV2owk7oiLbRQ/2/DAjUHmswD40HRrz6nrjJBtC GQa1K74G11XoU6qMxFk8lL0kKjqV9IVBNdLluktm5hTkI3ZiUMKt1aWoyOjws7PWnk5ErR3Y3c+y IdwNu0cu63MyyzXZtImCJJzFXEdl3b/SVGKOvwGNojzabk2ZLImsoJXe3DaPnHOsQahaOrbXw6QR zeR3IKA/84Wy6AIeWaYfSDlA27Fz26G/67y9Kf9KGE3ZGws0szGIPoroBXVBoIZXGLz6gOGJ+bIV j88NE3xCnEl6E7jesObRB9Fam19o4QIHGaoSmg== )`
	RRSIG=34839 and DNSKEY=34839/SEP verifies the DNSKEY RRset
	RRSIG=42218 and DNSKEY=42218 verifies the DNSKEY RRset
	DNSKEY=42218 is now in the chain-of-trust
	Query to ns3.nih.GOV for medlineplus.awsprod.nlm.nih.GOV/A
	Error querying ns3.nih.GOV/2607:f220:402:1801:0:0:a570:4e6 for medlineplus.awsprod.nlm.nih.GOV/A: 'IPv6 transport disabled'
	Received 464 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (464 bytes) ;; HEADER SECTION ;; id = 49542 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.gov. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.gov. 86400 IN NS ns-226.awsdns-28.com. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a4gq1l7oecs4at2tbbv4ssar4h896bfd NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20191025105736 20190925103016 21587 nlm.nih.gov. Yoe8UkBFahBk8iYM2SUKdtP68GZjM5p9V2OlDhpmtPsEeHOKK2ML6sDNeS/qRGFj9xOd8Mll9Oja 0iWhAPM5UT3iz8Z+FMjUQs2umUT6jlF/4gS4L0rOUnHsXUmRv2mFiseZBwl9wTx5Uu1UVuieYkcm 09gKX0tlX9lZLyyUvkY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.nih.GOV for nlm.nih.GOV/DNSKEY
	Error querying ns3.nih.GOV/2607:f220:402:1801:0:0:a570:4e6 for nlm.nih.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 945 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (945 bytes) ;; HEADER SECTION ;; id = 16560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nlm.nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAZ9D95oZKhdyyFGgi/cpgAkchO6o/I0LIk2/vt67pLYptxiSyJusmnTjUp6UBF2aDpEdIrpl 7VU8DENUVv+3LBFlnlQyj6EwjCoHm0BEnE/SzBp/LfmPGCuNAZRfenNNNYQ/9eJWGcWCnqcnW0U5 FKFk4rxHH6XXi2edI/AjXOlx5S4+PvyH8+nfarhbvG3dj2Y1jjYrxpuimdQRTLrPsQFykmjhvyxI iwqlLsXlv6sscFEQm4ZtguMHj5TL/vRzABXvDhzXbQV7CKAxXIb1d4ng05YHOikH5yGkbSn7PwQh 8g5dzEmcct4dj7IWuSRivLzwRZlrCo/S+xLpGPc9LfM= ) ; Key ID = 14674 nlm.nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAd+i9gCo2RUgwttx4UJI8cjflprL4/PohlKGImPN15seK3a37hqtYMvhYQo2H0GLtThO62z6 8xPszzS8ry612pQJBICjfCeEqyJ8Cb01gYucMw33pVFV2h7Vidfc0dFKlJq7IqXUBGCbH6bjRdic xrVucRmlh88v2i+W0eT1IQyJ ) ; Key ID = 21587 nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20191028112759 20190928103014 14674 nlm.nih.gov. NZF3p7oLqIJaOOxFgToslXyHno4SXG6EOB9XtXPtHtFqp4PLmNkI2D9tLtREohalo3LuOkTw+YHC peAk1V+ccFGvbo9KSxjg3sXwMdF690LNXOt44boTcRjmH80RU5pIQ9osyVMNcnEjJ7tSh3yXTzun GoD1ZhHyHLu6jo3pDswQYHmmNU5rggJ+ta54b7iGRAK6ctmMuWgaJy2hQIk4DF93wvWc5CvoOEFX hen3eDZsvBdtL87kc6WTOmdT68LVGbi90XlNAGZhRgDH+VTA2RxtD/d72jVbD6g9OLmmzCqIrjA0 y7Ii9jH840mPncZ+Yo1vseMjzGBI66EyPqze4g== ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20191028112759 20190928103014 21587 nlm.nih.gov. B757jRH14XBm1CBlaAfSxhIHXYW8Qs210blAz+ipAigRCbqxNuu5772H50MQSzpVQQnYppoXXd0H dupjCQ89jWDHfBY2qX9SU5dTrsVWvdBD+DTGpfy/+yo150Jfe4BZb1S+sTm/g/0eZqp6SMEauP1/ hlu2fS+Z5AnXcunG8oY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nlm.nih.GOV
	Attempting to learn nameservers for nlm.nih.GOV
	Query to ns3.nih.GOV for nlm.nih.GOV/NS
	Received 317 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (317 bytes) ;; HEADER SECTION ;; id = 1549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN NS ;; ANSWER SECTION (6 records) nlm.nih.gov. 3600 IN NS ns3.nih.gov. nlm.nih.gov. 3600 IN NS lhcns2.nlm.nih.gov. nlm.nih.gov. 3600 IN NS lhcns1.nlm.nih.gov. nlm.nih.gov. 3600 IN NS ns2.nih.gov. nlm.nih.gov. 3600 IN NS ns.nih.gov. nlm.nih.gov. 3600 IN RRSIG ( NS 7 3 3600 20191025111638 20190925103020 21587 nlm.nih.gov. Mant3SEfppYhXBsPrc0e7WqxMDrEmX+SI6fqCTgpRuExvht5ghFmJ7S6bGeoAjhxJx1ozRFSOOpY NvuIcyKht3fZ7TsmbC/Qv7Xx4TTP6QlI9nPr+a24kXLt4YTtPn2SvAPXl53tYmokpa8l21i1VLYs uzkrABJhIFxZqF4ILEg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found nlm.nih.GOV nameservers: ns3.nih.gov, lhcns2.nlm.nih.gov, lhcns1.nlm.nih.gov, ns2.nih.gov, ns.nih.gov

nlm.nih.GOV

	Checking DS between nih.GOV and nlm.nih.GOV
	Query to ns.nih.GOV for nlm.nih.GOV/DS
	Received 394 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (394 bytes) ;; HEADER SECTION ;; id = 15679 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DS ;; ANSWER SECTION (2 records) nlm.nih.gov. 3600 IN DS ( 14674 7 2 fd00329146ac9c30acaab5edfa9f8b56b548b6e3dd66a11d2505ecb471807d80 ) nlm.nih.gov. 3600 IN RRSIG ( DS 7 3 3600 20200109170538 20191011170538 42218 nih.gov. hQnMYXo5evX/09wC1OVJ8q+rzWYRJnWt0NP/lvPc8Io7qtZPkj3Un7vw5OEF0QmTU7+HtcQjaAzv 4mb2kDOOcDdhJlB1CM2+hTcmhmMDdUQyu9PoilnwmX48lLnHqDJ+B71Fxc2wQGOk4ErDvEvHP66J 6tKaMzegDe40UNf+vt3mtWc1yqFtx6EfwJYr4zyXPoLTI+toZiOj/GkTYJnK56UTxc/tVH5KcTX0 NiH4n3GvRFZ6o+gxYuNPpgcRGW13vflxCt3sCxGDbNffAPFeuHxmzdL4hKXBXUDT+CTf7NHv1cpf aGU5Z7EaW+lyQdR1koZy6j/KeaDds/2Gl2iZQQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for nlm.nih.GOV in the nih.GOV zone
	DS=14674/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`nlm.nih.gov. 3600 IN RRSIG ( DS 7 3 3600 20200109170538 20191011170538 42218 nih.gov. hQnMYXo5evX/09wC1OVJ8q+rzWYRJnWt0NP/lvPc8Io7qtZPkj3Un7vw5OEF0QmTU7+HtcQjaAzv 4mb2kDOOcDdhJlB1CM2+hTcmhmMDdUQyu9PoilnwmX48lLnHqDJ+B71Fxc2wQGOk4ErDvEvHP66J 6tKaMzegDe40UNf+vt3mtWc1yqFtx6EfwJYr4zyXPoLTI+toZiOj/GkTYJnK56UTxc/tVH5KcTX0 NiH4n3GvRFZ6o+gxYuNPpgcRGW13vflxCt3sCxGDbNffAPFeuHxmzdL4hKXBXUDT+CTf7NHv1cpf aGU5Z7EaW+lyQdR1koZy6j/KeaDds/2Gl2iZQQ== )`
	RRSIG=42218 and DNSKEY=42218 verifies the DS RRset
	DS=14674/SHA-256 is now in the chain-of-trust
	`nlm.nih.gov. 3600 IN DS ( 14674 7 2 fd00329146ac9c30acaab5edfa9f8b56b548b6e3dd66a11d2505ecb471807d80 )`
	Query to ns2.nih.gov for nlm.nih.GOV/DNSKEY
	Error querying ns2.nih.gov/2607:f220:418:4101:0:0:80e7:401 for nlm.nih.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 945 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (945 bytes) ;; HEADER SECTION ;; id = 32539 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nlm.nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAd+i9gCo2RUgwttx4UJI8cjflprL4/PohlKGImPN15seK3a37hqtYMvhYQo2H0GLtThO62z6 8xPszzS8ry612pQJBICjfCeEqyJ8Cb01gYucMw33pVFV2h7Vidfc0dFKlJq7IqXUBGCbH6bjRdic xrVucRmlh88v2i+W0eT1IQyJ ) ; Key ID = 21587 nlm.nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAZ9D95oZKhdyyFGgi/cpgAkchO6o/I0LIk2/vt67pLYptxiSyJusmnTjUp6UBF2aDpEdIrpl 7VU8DENUVv+3LBFlnlQyj6EwjCoHm0BEnE/SzBp/LfmPGCuNAZRfenNNNYQ/9eJWGcWCnqcnW0U5 FKFk4rxHH6XXi2edI/AjXOlx5S4+PvyH8+nfarhbvG3dj2Y1jjYrxpuimdQRTLrPsQFykmjhvyxI iwqlLsXlv6sscFEQm4ZtguMHj5TL/vRzABXvDhzXbQV7CKAxXIb1d4ng05YHOikH5yGkbSn7PwQh 8g5dzEmcct4dj7IWuSRivLzwRZlrCo/S+xLpGPc9LfM= ) ; Key ID = 14674 nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20191028112759 20190928103014 14674 nlm.nih.gov. NZF3p7oLqIJaOOxFgToslXyHno4SXG6EOB9XtXPtHtFqp4PLmNkI2D9tLtREohalo3LuOkTw+YHC peAk1V+ccFGvbo9KSxjg3sXwMdF690LNXOt44boTcRjmH80RU5pIQ9osyVMNcnEjJ7tSh3yXTzun GoD1ZhHyHLu6jo3pDswQYHmmNU5rggJ+ta54b7iGRAK6ctmMuWgaJy2hQIk4DF93wvWc5CvoOEFX hen3eDZsvBdtL87kc6WTOmdT68LVGbi90XlNAGZhRgDH+VTA2RxtD/d72jVbD6g9OLmmzCqIrjA0 y7Ii9jH840mPncZ+Yo1vseMjzGBI66EyPqze4g== ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20191028112759 20190928103014 21587 nlm.nih.gov. B757jRH14XBm1CBlaAfSxhIHXYW8Qs210blAz+ipAigRCbqxNuu5772H50MQSzpVQQnYppoXXd0H dupjCQ89jWDHfBY2qX9SU5dTrsVWvdBD+DTGpfy/+yo150Jfe4BZb1S+sTm/g/0eZqp6SMEauP1/ hlu2fS+Z5AnXcunG8oY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nlm.nih.GOV
	`nlm.nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAd+i9gCo2RUgwttx4UJI8cjflprL4/PohlKGImPN15seK3a37hqtYMvhYQo2H0GLtThO62z6 8xPszzS8ry612pQJBICjfCeEqyJ8Cb01gYucMw33pVFV2h7Vidfc0dFKlJq7IqXUBGCbH6bjRdic xrVucRmlh88v2i+W0eT1IQyJ ) ; Key ID = 21587`
	`nlm.nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAZ9D95oZKhdyyFGgi/cpgAkchO6o/I0LIk2/vt67pLYptxiSyJusmnTjUp6UBF2aDpEdIrpl 7VU8DENUVv+3LBFlnlQyj6EwjCoHm0BEnE/SzBp/LfmPGCuNAZRfenNNNYQ/9eJWGcWCnqcnW0U5 FKFk4rxHH6XXi2edI/AjXOlx5S4+PvyH8+nfarhbvG3dj2Y1jjYrxpuimdQRTLrPsQFykmjhvyxI iwqlLsXlv6sscFEQm4ZtguMHj5TL/vRzABXvDhzXbQV7CKAxXIb1d4ng05YHOikH5yGkbSn7PwQh 8g5dzEmcct4dj7IWuSRivLzwRZlrCo/S+xLpGPc9LfM= ) ; Key ID = 14674`
	DNSKEY=14674/SEP is now in the chain-of-trust
	DS=14674/SHA-256 verifies DNSKEY=14674/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20191028112759 20190928103014 14674 nlm.nih.gov. NZF3p7oLqIJaOOxFgToslXyHno4SXG6EOB9XtXPtHtFqp4PLmNkI2D9tLtREohalo3LuOkTw+YHC peAk1V+ccFGvbo9KSxjg3sXwMdF690LNXOt44boTcRjmH80RU5pIQ9osyVMNcnEjJ7tSh3yXTzun GoD1ZhHyHLu6jo3pDswQYHmmNU5rggJ+ta54b7iGRAK6ctmMuWgaJy2hQIk4DF93wvWc5CvoOEFX hen3eDZsvBdtL87kc6WTOmdT68LVGbi90XlNAGZhRgDH+VTA2RxtD/d72jVbD6g9OLmmzCqIrjA0 y7Ii9jH840mPncZ+Yo1vseMjzGBI66EyPqze4g== )`
	`nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20191028112759 20190928103014 21587 nlm.nih.gov. B757jRH14XBm1CBlaAfSxhIHXYW8Qs210blAz+ipAigRCbqxNuu5772H50MQSzpVQQnYppoXXd0H dupjCQ89jWDHfBY2qX9SU5dTrsVWvdBD+DTGpfy/+yo150Jfe4BZb1S+sTm/g/0eZqp6SMEauP1/ hlu2fS+Z5AnXcunG8oY= )`
	RRSIG=14674 and DNSKEY=14674/SEP verifies the DNSKEY RRset
	RRSIG=21587 and DNSKEY=21587 verifies the DNSKEY RRset
	DNSKEY=21587 is now in the chain-of-trust
	Query to ns3.nih.gov for medlineplus.awsprod.nlm.nih.GOV/A
	Error querying ns3.nih.gov/2607:f220:402:1801:0:0:a570:4e6 for medlineplus.awsprod.nlm.nih.GOV/A: 'IPv6 transport disabled'
	Received 464 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (464 bytes) ;; HEADER SECTION ;; id = 20398 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.gov. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.gov. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 86400 IN NS ns-584.awsdns-09.net. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a4gq1l7oecs4at2tbbv4ssar4h896bfd NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20191025105736 20190925103016 21587 nlm.nih.gov. Yoe8UkBFahBk8iYM2SUKdtP68GZjM5p9V2OlDhpmtPsEeHOKK2ML6sDNeS/qRGFj9xOd8Mll9Oja 0iWhAPM5UT3iz8Z+FMjUQs2umUT6jlF/4gS4L0rOUnHsXUmRv2mFiseZBwl9wTx5Uu1UVuieYkcm 09gKX0tlX9lZLyyUvkY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to lhcns1.nlm.nih.gov for awsprod.nlm.nih.GOV/DNSKEY
	Error querying lhcns1.nlm.nih.gov/2607:f220:41e:7055:0:0:0:72 for awsprod.nlm.nih.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 452 bytes from 130.14.55.72
	;; Answer received from 130.14.55.72 (452 bytes) ;; HEADER SECTION ;; id = 21396 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.gov. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.gov. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.gov. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.gov. 86400 IN NS ns-226.awsdns-28.com. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a4gq1l7oecs4at2tbbv4ssar4h896bfd NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20191025105736 20190925103016 21587 nlm.nih.gov. Yoe8UkBFahBk8iYM2SUKdtP68GZjM5p9V2OlDhpmtPsEeHOKK2ML6sDNeS/qRGFj9xOd8Mll9Oja 0iWhAPM5UT3iz8Z+FMjUQs2umUT6jlF/4gS4L0rOUnHsXUmRv2mFiseZBwl9wTx5Uu1UVuieYkcm 09gKX0tlX9lZLyyUvkY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone awsprod.nlm.nih.GOV

awsprod.nlm.nih.GOV

	Checking DS between nlm.nih.GOV and awsprod.nlm.nih.GOV
	Query to ns3.nih.gov for awsprod.nlm.nih.GOV/DS
	Error querying ns3.nih.gov/2607:f220:402:1801:0:0:a570:4e6 for awsprod.nlm.nih.GOV/DS: 'IPv6 transport disabled'
	Received 540 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (540 bytes) ;; HEADER SECTION ;; id = 25296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlm.nih.gov. 3600 IN SOA ( lhcns1.nlm.nih.gov. nlmdnshostmaster.mail.nih.gov. 585988571 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nlm.nih.gov. 3600 IN RRSIG ( SOA 7 3 3600 20191110174705 20191011164705 21587 nlm.nih.gov. gYT/YAlxwT/510OabqapVewEdmxMfOos6/WOvW5rdQACr+PbaKWn+FR43dc9buvmSue+wmDOdfWW fDvY9gut6htQQJypRqdz9B0pEm009f0GoDNHpug5oChumyTM7JY0Xlh/uEu4720B9P8cfyhR+viP lEi1i973Pra/FYi2P/s= ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a4gq1l7oecs4at2tbbv4ssar4h896bfd NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20191025105736 20190925103016 21587 nlm.nih.gov. Yoe8UkBFahBk8iYM2SUKdtP68GZjM5p9V2OlDhpmtPsEeHOKK2ML6sDNeS/qRGFj9xOd8Mll9Oja 0iWhAPM5UT3iz8Z+FMjUQs2umUT6jlF/4gS4L0rOUnHsXUmRv2mFiseZBwl9wTx5Uu1UVuieYkcm 09gKX0tlX9lZLyyUvkY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for awsprod.nlm.nih.GOV in the nlm.nih.GOV zone
	Query to ns-584.awsdns-09.net for awsprod.nlm.nih.GOV/DNSKEY
	Error querying ns-584.awsdns-09.net/2600:9000:5302:4800:0:0:0:1 for awsprod.nlm.nih.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 135 bytes from 205.251.194.72
	;; Answer received from 205.251.194.72 (135 bytes) ;; HEADER SECTION ;; id = 25749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.GOV/A
	Received 264 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (264 bytes) ;; HEADER SECTION ;; id = 14352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.216.36 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.216.50 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.216.98 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.216.117 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	awsprod.nlm.nih.GOV is authoritative for medlineplus.awsprod.nlm.nih.GOV
	Query to ns-1125.awsdns-12.org for medlineplus.awsprod.nlm.nih.GOV/DNSKEY
	Received 147 bytes from 205.251.196.101
	;; Answer received from 205.251.196.101 (147 bytes) ;; HEADER SECTION ;; id = 1147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1890.awsdns-44.co.uk for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.199.98
	;; Answer received from 205.251.199.98 (249 bytes) ;; HEADER SECTION ;; id = 18742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-226.awsdns-28.com for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (249 bytes) ;; HEADER SECTION ;; id = 34079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-584.awsdns-09.net for awsprod.nlm.nih.GOV/SOA
	Error querying ns-584.awsdns-09.net/2600:9000:5302:4800:0:0:0:1 for awsprod.nlm.nih.GOV/SOA: 'IPv6 transport disabled'
	Received 249 bytes from 205.251.194.72
	;; Answer received from 205.251.194.72 (249 bytes) ;; HEADER SECTION ;; id = 43622 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1125.awsdns-12.org for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.196.101
	;; Answer received from 205.251.196.101 (249 bytes) ;; HEADER SECTION ;; id = 53028 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.GOV/A
	Error querying ns-226.awsdns-28.com/2600:9000:5300:e200:0:0:0:1 for medlineplus.awsprod.nlm.nih.GOV/A: 'IPv6 transport disabled'
	Received 264 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (264 bytes) ;; HEADER SECTION ;; id = 56347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.104.116 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.104.47 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.104.113 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.104.38 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	medlineplus.awsprod.nlm.nih.GOV A RR has value 99.84.104.116
	medlineplus.awsprod.nlm.nih.GOV A RR has value 99.84.104.47
	medlineplus.awsprod.nlm.nih.GOV A RR has value 99.84.104.113
	medlineplus.awsprod.nlm.nih.GOV A RR has value 99.84.104.38
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MEDLINEPLUS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: