DNSSEC Analyzer - MEDLINEPLUS.GOV

Domain Name:

Time: 2020-09-26 19:14:29 UTC, NTP stratum 4

Analyzing DNSSEC problems for MEDLINEPLUS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (1139 bytes) ;; HEADER SECTION ;; id = 40227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	DNSKEY=46594 is now in the chain-of-trust
	Query to k.root-servers.net for MEDLINEPLUS.GOV/A
	Received 673 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (673 bytes) ;; HEADER SECTION ;; id = 43078 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201006050000 20200923040000 46594 . BuVJU72d5w77gBzJjMzQ2NS0PAM7pf1pctmqgVc4eSlMRJ+Jz0jpjbnkSfh4lM/f2E8XOT4zTOz7 z0eq08R7l5uAOxTvC8nKFbJKMZi46ErhzvwOiMzpkyaQkQ4eqfzLlBimcpCuCohFMDbnj45G28hC jeU1yI0vo8mqNrwwSCq/UypHSRck+5vQPv5MbqrVg0glu/PxQMJ7OaodBOkQ0t5XQ0PoOOIgYu+v ddvhnoxMOdMzukgQi2s5YM1A8VFGVxXSQvMowc6UQuf4TPu/HF/XM9bw3K56Am/t51vWEhb3el2T GIZiWmYSYYGxO7aQO36fntp3htPq/U2HGm526w== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (658 bytes) ;; HEADER SECTION ;; id = 29588 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 23023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 11920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201001190254 20200916185754 7698 gov. WJb3UC5UfhfrhSDl/HH+i6dNa14I10Toprb/UxSwtc3+S9Zryxs+sSdsUolE7TZbDbATIDrBb92U 8RgrE1d9/5YtacnuSr5bIp8IF7+DvlWA0Lz2kjatiXGje59QeG58hx//Q/P7AhnDdM7REWXxiNFa Qc1xrOQezskvGXX0KizIQm0TrXlAW0QQ4F2PteJCVhQg+w69WBRU4vxiGGAmJIdRVkwzgJXneadM rqLjoQXDV/XEnNc8nh9JIU5a1UsgW6hGypeuDjE/9p+UCXrFz6diNnEQ2P5cvJv8GqzJrnSONCKJ 8vNRlMB+n6D2WGFqzfVhFuAjuvSnfp8aXOByEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201001190254 20200916185754 7698 gov. WJb3UC5UfhfrhSDl/HH+i6dNa14I10Toprb/UxSwtc3+S9Zryxs+sSdsUolE7TZbDbATIDrBb92U 8RgrE1d9/5YtacnuSr5bIp8IF7+DvlWA0Lz2kjatiXGje59QeG58hx//Q/P7AhnDdM7REWXxiNFa Qc1xrOQezskvGXX0KizIQm0TrXlAW0QQ4F2PteJCVhQg+w69WBRU4vxiGGAmJIdRVkwzgJXneadM rqLjoQXDV/XEnNc8nh9JIU5a1UsgW6hGypeuDjE/9p+UCXrFz6diNnEQ2P5cvJv8GqzJrnSONCKJ 8vNRlMB+n6D2WGFqzfVhFuAjuvSnfp8aXOByEQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=26665 is now in the chain-of-trust
	Query to b.gov-servers.net for MEDLINEPLUS.GOV/A
	Received 526 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (526 bytes) ;; HEADER SECTION ;; id = 11861 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) MEDLINEPLUS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN DS ( 24081 7 2 6d9c1808f2abb1769f0243f641917de72a2aa2e81814160c3c682d7c79a9e136 ) MEDLINEPLUS.GOV. 3600 IN DS ( 24081 7 1 18b1b806e8b8a30c1eaa0282eb611c9f2c682d0d ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. Ma6hvOA0q052r5LdtIf0+IX9JgipobfcwI5T9YFbbRfPJEnSHttzR6xAswSJoYAcAF5p+gLg67Zy DVPQoHMGAf6xfyufnw9x5ZpJyzOJilkWjKLvBoOUc3qtywQuB9W3jadNL5ZG0PAy+2W22zj/FN5U fyQKci40qGEsUXbm25FDX7Ue/vPgrPISA2KzcWCedVP2N8p8xQgP5AAbRLtK0Q== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for MEDLINEPLUS.GOV/DNSKEY
	Received 526 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (526 bytes) ;; HEADER SECTION ;; id = 7250 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) MEDLINEPLUS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN DS ( 24081 7 2 6d9c1808f2abb1769f0243f641917de72a2aa2e81814160c3c682d7c79a9e136 ) MEDLINEPLUS.GOV. 3600 IN DS ( 24081 7 1 18b1b806e8b8a30c1eaa0282eb611c9f2c682d0d ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. Ma6hvOA0q052r5LdtIf0+IX9JgipobfcwI5T9YFbbRfPJEnSHttzR6xAswSJoYAcAF5p+gLg67Zy DVPQoHMGAf6xfyufnw9x5ZpJyzOJilkWjKLvBoOUc3qtywQuB9W3jadNL5ZG0PAy+2W22zj/FN5U fyQKci40qGEsUXbm25FDX7Ue/vPgrPISA2KzcWCedVP2N8p8xQgP5AAbRLtK0Q== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MEDLINEPLUS.GOV

MEDLINEPLUS.GOV

	Checking DS between GOV and MEDLINEPLUS.GOV
	Query to a.gov-servers.net for MEDLINEPLUS.GOV/DS
	Received 407 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (407 bytes) ;; HEADER SECTION ;; id = 18910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DS ;; ANSWER SECTION (5 records) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN DS ( 24081 7 2 6d9c1808f2abb1769f0243f641917de72a2aa2e81814160c3c682d7c79a9e136 ) MEDLINEPLUS.GOV. 3600 IN DS ( 24081 7 1 18b1b806e8b8a30c1eaa0282eb611c9f2c682d0d ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. Ma6hvOA0q052r5LdtIf0+IX9JgipobfcwI5T9YFbbRfPJEnSHttzR6xAswSJoYAcAF5p+gLg67Zy DVPQoHMGAf6xfyufnw9x5ZpJyzOJilkWjKLvBoOUc3qtywQuB9W3jadNL5ZG0PAy+2W22zj/FN5U fyQKci40qGEsUXbm25FDX7Ue/vPgrPISA2KzcWCedVP2N8p8xQgP5AAbRLtK0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for MEDLINEPLUS.GOV in the GOV zone
	DS=30870/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=24081/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=24081/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=30870/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. Ma6hvOA0q052r5LdtIf0+IX9JgipobfcwI5T9YFbbRfPJEnSHttzR6xAswSJoYAcAF5p+gLg67Zy DVPQoHMGAf6xfyufnw9x5ZpJyzOJilkWjKLvBoOUc3qtywQuB9W3jadNL5ZG0PAy+2W22zj/FN5U fyQKci40qGEsUXbm25FDX7Ue/vPgrPISA2KzcWCedVP2N8p8xQgP5AAbRLtK0Q== )`
	RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
	DS=30870/SHA-256 is now in the chain-of-trust
	DS=24081/SHA-256 is now in the chain-of-trust
	`MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce )`
	`MEDLINEPLUS.GOV. 3600 IN DS ( 24081 7 2 6d9c1808f2abb1769f0243f641917de72a2aa2e81814160c3c682d7c79a9e136 )`
	`MEDLINEPLUS.GOV. 3600 IN DS ( 24081 7 1 18b1b806e8b8a30c1eaa0282eb611c9f2c682d0d )`
	`MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 )`
	Query to gslb02.nlm.nih.GOV for MEDLINEPLUS.GOV/DNSKEY
	Received 2360 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (2360 bytes) ;; HEADER SECTION ;; id = 46851 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAc9XflNiZCBGHpwTw6pHrnuwI0vTvwGsJBUFAKAU+q51Ra4q7s/bgbbOEFdAOdzdNDWovj0Y ZJ2aHOUIA/P28xn0rVJt4z8TAYqOEMyxeUgaDABpbfsEAKmSVTRj9D5wf0ImLdCDLzUykAhdH13R RgRtsDTIcXa+xQ3zapIkLKF7zJchLxlpVkQPBpeMw2rF2mrYNv1wM9Pzf7gieIqnAyHRVZ+eymV2 UeyurHh3vMOO4PmXUI5mMIuKscvTihOvj6MmBW7t5CbMAkVA6Hymt1Eold1IhVHx+HxzTuwQ98nx hsjqzBEEvFMY0g4aFVi/rrxc/8OejYwwWyhRqR3Ls18= ) ; Key ID = 30870 MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaYQ/SiUc6jlOcQosuwvWVKBBkdlOIyoUebL/4hr4xwvG8jwxRd4HAtS1f4H8DBcPp1CFwnJ RQoBQB/leLC6Jo3sJ2L+5oTBT1SNKQenVpzJBY8J2IJ7FBs+LMNkwa4cIq9CG60pHlLRLUTUevK6 bLaCYm3My1T9x03l+M+JJ9W88hN8gPOv8UFNwmFLNAjX0jgLykU5rrKExu6XPekSPxD63Gi7Xhkl 0m+6XJf+hMEZDXUZ+4R3iOBj6pCfVYclL0YaEuQHyh5jNKYgvFM7ftWrQhJtxfozIVZSXM6NYIO2 xBmwkXv53/U2wLNNyuluT4ZlNWlhdhjUENGl/paD3EU= ) ; Key ID = 24081 MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAblrLAPr4kvce/QDkcRIf86BXFgJAFGWt4Kmfp6+npCkf6E0RtmumunRVB6tMKhgVdqykCF8 yjFQ75D3XRffLVQkY/enq6J3y5xtDG5dhe6bt5CmZ4p3XDRaiqMWWV7RMP0UErMo5Xhupy7xXDvb Vqrh3DOrN75MDp5CWk8egA6yOTCNXXupSv+5jdRjkjnM297W8JE9Dl3N3EPNT/gpcQWSY75cFLGv 653++GbVu00TBQ9+Q6Csq5ZybgbFW0Z+WrmaASsceO9jUKX1weNOqsMPHgWuPdfQY+SM5oI94mTc 1U5mEjkBXZSzavedEero+f+J+PnRulLmbA/NJoHAsNE= ) ; Key ID = 59630 MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAbtf8AtqKqLYhP+jptDeeWy0NPkA5+w9UfhX3NlKspctvZIZpyBYMLjpV2MuR9kM/vmB3m8y SW7LxP+OVyT2aUSQ0DUGrYWmgCsPw0ApsFMVliMVdrfIjWRGvXsWTwIafsBMUy+6sn3ZQYCUHZFs 1UYwL4q7kyKuvz561OHMN5tvQfHkYgt2/po1uAQXZVv364FMr5MIAbKllwcLyRrkCtjZL/r60knG KTheQeRkv2XINjq7Ij225n/x5h3X9l7s4ynDsEQgjlqhEgkIMT1CBQcrtiydqLmbg86iOp5TRw9T g/q1JiUOQC7LUQVIZrlM4LFO1wrEWDjzNNU3XROLFzs= ) ; Key ID = 45128 MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20201012125440 20200921125440 30870 medlineplus.gov. ND6sMyVi1OSqxoSXv3evACn5AggCPJj1wFZJZcCVmzkBrFUM27akpHmEFcWiqOpj43dRu4hkxLjN 15hvjF/o+H/1ZFawwaqmlg/i/yvhv/lTuIEZ/ZbKvRxGbwWq2FeH0nXBk5Qw2FuWjYVHdwz/ttEM 01mT8V1/5szTONIDmOY95QsU2iFWZt3c2DI145/5y1O9AbhN++9lTOvICd/NfFqGoAJI2aG0xLiI 8bzG6k74KFY4GI+sDRfPbG0V0+7QqXD/igYgMBnysmiGs5jRgHxsYNJ7becdVqWTFlYxU5CJQihB dc5yr3typRmevzNssxwhlmAgC8WpQSIaxNDdFw== ) MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20201012125440 20200921125440 24081 medlineplus.gov. O+2h7iLj6sGTdOz7qImsH2pT9OnU9uVjgmr6kvUiQeycq9WXk/Sp7FFWpBBAF8zEUGyuGWGDJ3Lg ygWIZkKQeNFDB6Z+LI/bTT4IfPzeAKv4GX5Lj8U6Ed9GR8+9m+684xM0e6LnBURewYNWr4h4Y/G9 AHJU8HMNtbU6o6LamG2Td/5+mDj36pjNEJqyDiH8csiiWm6Ec7Aj1uoLa+s3kU1lSygfKpngC3fl ZO8GICCb+wg9ebaU83ekxTE4YALioMS8mInXsa8efE8dbPArRlGN2KOkd4JpiMuFff1cEZbcLWkF r0NIWmcvAtPL15sciiRe0w3L87iZQExHKsTaUA== ) MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20201011165450 20200920165450 59630 medlineplus.gov. X3sLXUIxhFVbGi93t81Vd4MqWMtzOa0Ur7nqQlPO3XiQfF5TuOnsmzhrxUB5s4G8lYMxgSUcgn7f T4LhO9Wxa8PeFHDlOp/4g/cc/GI7JWQ4J7Ons/3yzoAXJf0YFs6ZCv38wMVYwsb1V67QNBOwz6QG Rj2Ha/KxgsBmtFVqluZZDAtEVXPohl08UVG/SmEW2UKHuMbJzVR8QpaKDkof9GxaOpkn98tbs2bA +MrLzpTei9N+I9Hs/DzbcxzeXORfNJ3ruPQvuQ41nNuBgwF4vCgDXWRmTEyWWDZ7MIp4YUmODY/Z Ow7Erww8HnjEdrgDwuyEGb0AJzJc4ASm+k4Cvw== ) MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20201011165450 20200920165450 45128 medlineplus.gov. fHaHGcZUAVxT6ZqY9B8e6XJvBmpj3jAldZwtGGSf6IHrRTcPTA9GJU9nczd6sujD4oWY0H/4XOp7 lyDhZjsYzMJ4D6CyjsdDhbT6trIiwH6cD0ejDOWz167sQEUnbL9tIKwaMgVzH7B6Zasvsmjshe0+ xe7Lkx+4QXdgCr0B2/lx0+LcefZqiztrt7VRWslLg43E9zFyE2KHWbdHKFL3O7osRKjK0VCE1gmh effR/SidGxI5cbAQuItYXokPjzX70xAZh0lxbdXOSSferdUsMzV83UfQluIewxZGWO8qVlkJ/Ope 9NGyALib2BSNu6ucQ1Nx+Tu83sk6wPx4TANE/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for MEDLINEPLUS.GOV
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAc9XflNiZCBGHpwTw6pHrnuwI0vTvwGsJBUFAKAU+q51Ra4q7s/bgbbOEFdAOdzdNDWovj0Y ZJ2aHOUIA/P28xn0rVJt4z8TAYqOEMyxeUgaDABpbfsEAKmSVTRj9D5wf0ImLdCDLzUykAhdH13R RgRtsDTIcXa+xQ3zapIkLKF7zJchLxlpVkQPBpeMw2rF2mrYNv1wM9Pzf7gieIqnAyHRVZ+eymV2 UeyurHh3vMOO4PmXUI5mMIuKscvTihOvj6MmBW7t5CbMAkVA6Hymt1Eold1IhVHx+HxzTuwQ98nx hsjqzBEEvFMY0g4aFVi/rrxc/8OejYwwWyhRqR3Ls18= ) ; Key ID = 30870`
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaYQ/SiUc6jlOcQosuwvWVKBBkdlOIyoUebL/4hr4xwvG8jwxRd4HAtS1f4H8DBcPp1CFwnJ RQoBQB/leLC6Jo3sJ2L+5oTBT1SNKQenVpzJBY8J2IJ7FBs+LMNkwa4cIq9CG60pHlLRLUTUevK6 bLaCYm3My1T9x03l+M+JJ9W88hN8gPOv8UFNwmFLNAjX0jgLykU5rrKExu6XPekSPxD63Gi7Xhkl 0m+6XJf+hMEZDXUZ+4R3iOBj6pCfVYclL0YaEuQHyh5jNKYgvFM7ftWrQhJtxfozIVZSXM6NYIO2 xBmwkXv53/U2wLNNyuluT4ZlNWlhdhjUENGl/paD3EU= ) ; Key ID = 24081`
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAblrLAPr4kvce/QDkcRIf86BXFgJAFGWt4Kmfp6+npCkf6E0RtmumunRVB6tMKhgVdqykCF8 yjFQ75D3XRffLVQkY/enq6J3y5xtDG5dhe6bt5CmZ4p3XDRaiqMWWV7RMP0UErMo5Xhupy7xXDvb Vqrh3DOrN75MDp5CWk8egA6yOTCNXXupSv+5jdRjkjnM297W8JE9Dl3N3EPNT/gpcQWSY75cFLGv 653++GbVu00TBQ9+Q6Csq5ZybgbFW0Z+WrmaASsceO9jUKX1weNOqsMPHgWuPdfQY+SM5oI94mTc 1U5mEjkBXZSzavedEero+f+J+PnRulLmbA/NJoHAsNE= ) ; Key ID = 59630`
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAbtf8AtqKqLYhP+jptDeeWy0NPkA5+w9UfhX3NlKspctvZIZpyBYMLjpV2MuR9kM/vmB3m8y SW7LxP+OVyT2aUSQ0DUGrYWmgCsPw0ApsFMVliMVdrfIjWRGvXsWTwIafsBMUy+6sn3ZQYCUHZFs 1UYwL4q7kyKuvz561OHMN5tvQfHkYgt2/po1uAQXZVv364FMr5MIAbKllwcLyRrkCtjZL/r60knG KTheQeRkv2XINjq7Ij225n/x5h3X9l7s4ynDsEQgjlqhEgkIMT1CBQcrtiydqLmbg86iOp5TRw9T g/q1JiUOQC7LUQVIZrlM4LFO1wrEWDjzNNU3XROLFzs= ) ; Key ID = 45128`
	DNSKEY=30870/SEP is now in the chain-of-trust
	DS=30870/SHA-256 verifies DNSKEY=30870/SEP
	DS=30870/SHA-1 verifies DNSKEY=30870/SEP
	DNSKEY=24081/SEP is now in the chain-of-trust
	DS=24081/SHA-256 verifies DNSKEY=24081/SEP
	DS=24081/SHA-1 verifies DNSKEY=24081/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20201012125440 20200921125440 30870 medlineplus.gov. ND6sMyVi1OSqxoSXv3evACn5AggCPJj1wFZJZcCVmzkBrFUM27akpHmEFcWiqOpj43dRu4hkxLjN 15hvjF/o+H/1ZFawwaqmlg/i/yvhv/lTuIEZ/ZbKvRxGbwWq2FeH0nXBk5Qw2FuWjYVHdwz/ttEM 01mT8V1/5szTONIDmOY95QsU2iFWZt3c2DI145/5y1O9AbhN++9lTOvICd/NfFqGoAJI2aG0xLiI 8bzG6k74KFY4GI+sDRfPbG0V0+7QqXD/igYgMBnysmiGs5jRgHxsYNJ7becdVqWTFlYxU5CJQihB dc5yr3typRmevzNssxwhlmAgC8WpQSIaxNDdFw== )`
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20201012125440 20200921125440 24081 medlineplus.gov. O+2h7iLj6sGTdOz7qImsH2pT9OnU9uVjgmr6kvUiQeycq9WXk/Sp7FFWpBBAF8zEUGyuGWGDJ3Lg ygWIZkKQeNFDB6Z+LI/bTT4IfPzeAKv4GX5Lj8U6Ed9GR8+9m+684xM0e6LnBURewYNWr4h4Y/G9 AHJU8HMNtbU6o6LamG2Td/5+mDj36pjNEJqyDiH8csiiWm6Ec7Aj1uoLa+s3kU1lSygfKpngC3fl ZO8GICCb+wg9ebaU83ekxTE4YALioMS8mInXsa8efE8dbPArRlGN2KOkd4JpiMuFff1cEZbcLWkF r0NIWmcvAtPL15sciiRe0w3L87iZQExHKsTaUA== )`
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20201011165450 20200920165450 59630 medlineplus.gov. X3sLXUIxhFVbGi93t81Vd4MqWMtzOa0Ur7nqQlPO3XiQfF5TuOnsmzhrxUB5s4G8lYMxgSUcgn7f T4LhO9Wxa8PeFHDlOp/4g/cc/GI7JWQ4J7Ons/3yzoAXJf0YFs6ZCv38wMVYwsb1V67QNBOwz6QG Rj2Ha/KxgsBmtFVqluZZDAtEVXPohl08UVG/SmEW2UKHuMbJzVR8QpaKDkof9GxaOpkn98tbs2bA +MrLzpTei9N+I9Hs/DzbcxzeXORfNJ3ruPQvuQ41nNuBgwF4vCgDXWRmTEyWWDZ7MIp4YUmODY/Z Ow7Erww8HnjEdrgDwuyEGb0AJzJc4ASm+k4Cvw== )`
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20201011165450 20200920165450 45128 medlineplus.gov. fHaHGcZUAVxT6ZqY9B8e6XJvBmpj3jAldZwtGGSf6IHrRTcPTA9GJU9nczd6sujD4oWY0H/4XOp7 lyDhZjsYzMJ4D6CyjsdDhbT6trIiwH6cD0ejDOWz167sQEUnbL9tIKwaMgVzH7B6Zasvsmjshe0+ xe7Lkx+4QXdgCr0B2/lx0+LcefZqiztrt7VRWslLg43E9zFyE2KHWbdHKFL3O7osRKjK0VCE1gmh effR/SidGxI5cbAQuItYXokPjzX70xAZh0lxbdXOSSferdUsMzV83UfQluIewxZGWO8qVlkJ/Ope 9NGyALib2BSNu6ucQ1Nx+Tu83sk6wPx4TANE/Q== )`
	RRSIG=30870 and DNSKEY=30870/SEP verifies the DNSKEY RRset
	RRSIG=24081 and DNSKEY=24081/SEP verifies the DNSKEY RRset
	RRSIG=59630 and DNSKEY=59630 verifies the DNSKEY RRset
	RRSIG=45128 and DNSKEY=45128 verifies the DNSKEY RRset
	DNSKEY=59630 is now in the chain-of-trust
	DNSKEY=45128 is now in the chain-of-trust
	Query to gslb02.nlm.nih.GOV for MEDLINEPLUS.GOV/A
	Received 692 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (692 bytes) ;; HEADER SECTION ;; id = 21067 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (3 records) MEDLINEPLUS.GOV. 30 IN CNAME medlineplus.awsprod.nlm.nih.GOV. MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20201004111737 20200913111737 59630 medlineplus.gov. JgkXR72TIrcMP+7nE75+g6/K20gtxF1zxl9lke7Er8Ez6JPVq6lLOWbwh4AiDVR1C9FgNYiLyl6Y 42gSC0yiAuyYUwl1D0ZEB45ACjUMqqB8bMDn1k3ztoaPMoPuy0YKTHo4Yc2Iy6Ue9Z6jIyvDRF9u 3Sz9xz2QPbAApqrmbKbFm12uShmbyZ92mXLy0rFWunhuHnPZSt7Ow8R22ePsOiMipanPbuFIAndY Gzwcg/912dJvMSPBFTEmuzThQCXSfRfOrdc/BUSnDfP60bCdbb0sDmIg5TL3CVztknXmxtQV0a3v mnHlYhio384KS6YGYw2a0wS/+PRyW9E8NZEHug== ) MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20201011165400 20200920165400 45128 medlineplus.gov. abPVmIYTBxmYbOqyEnIVN0ez/M5m4tQrq27o5bfKZMn92V3mX16MkKlzf6G3O+i+vWFkuZQKTMdF zVaV2sHUXWyGCYSFd6eWV/kmjeqBBPtto6ksGCRuPB5bHGxIs9TphB/L4hOEeeB2Bes7Qn+xL8TH xszbVeR2BO3vun3jFCTDXbJTvhkAKu/DbfS5g3oU+FIKdZVwIJYOSRCDDmJi0AWiXIRWnLVvbQIg Is2hI3zIcUFzldPcy2DvZ9dV9SfYQHZJfO4CupXT883fUpZ/+HSRDV5CnhkGf5/HbCEglq9d8t9W 2NOmBeRH2IL2ieU9STE8dKJOUKb8OSc2DViNaw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MEDLINEPLUS.GOV is authoritative for MEDLINEPLUS.GOV
	Found RRSIG signed by medlineplus.gov zone
	MEDLINEPLUS.GOV is a CNAME to medlineplus.awsprod.nlm.nih.GOV
	Found 2 RRSIGs over CNAME RRset
	`MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20201004111737 20200913111737 59630 medlineplus.gov. JgkXR72TIrcMP+7nE75+g6/K20gtxF1zxl9lke7Er8Ez6JPVq6lLOWbwh4AiDVR1C9FgNYiLyl6Y 42gSC0yiAuyYUwl1D0ZEB45ACjUMqqB8bMDn1k3ztoaPMoPuy0YKTHo4Yc2Iy6Ue9Z6jIyvDRF9u 3Sz9xz2QPbAApqrmbKbFm12uShmbyZ92mXLy0rFWunhuHnPZSt7Ow8R22ePsOiMipanPbuFIAndY Gzwcg/912dJvMSPBFTEmuzThQCXSfRfOrdc/BUSnDfP60bCdbb0sDmIg5TL3CVztknXmxtQV0a3v mnHlYhio384KS6YGYw2a0wS/+PRyW9E8NZEHug== )`
	`MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20201011165400 20200920165400 45128 medlineplus.gov. abPVmIYTBxmYbOqyEnIVN0ez/M5m4tQrq27o5bfKZMn92V3mX16MkKlzf6G3O+i+vWFkuZQKTMdF zVaV2sHUXWyGCYSFd6eWV/kmjeqBBPtto6ksGCRuPB5bHGxIs9TphB/L4hOEeeB2Bes7Qn+xL8TH xszbVeR2BO3vun3jFCTDXbJTvhkAKu/DbfS5g3oU+FIKdZVwIJYOSRCDDmJi0AWiXIRWnLVvbQIg Is2hI3zIcUFzldPcy2DvZ9dV9SfYQHZJfO4CupXT883fUpZ/+HSRDV5CnhkGf5/HbCEglq9d8t9W 2NOmBeRH2IL2ieU9STE8dKJOUKb8OSc2DViNaw== )`
	RRSIG=59630 and DNSKEY=59630 verifies the CNAME RRset
	RRSIG=45128 and DNSKEY=45128 verifies the CNAME RRset

GOV

	Query to b.gov-servers.net for medlineplus.awsprod.nlm.nih.GOV/A
	Received 608 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (608 bytes) ;; HEADER SECTION ;; id = 49119 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nih.GOV. 86400 IN NS ns.nih.GOV. nih.GOV. 86400 IN NS ns3.nih.GOV. nih.GOV. 86400 IN NS ns2.nih.GOV. nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. fWJKBjLy/hcu47pdABrEQgoxt/xyI8VXv4bffPTrydnCcXHnH02galf7cF8b9/9RF2KDJiTgQd2J rJp9g+mXFLE6BWsoUp5nGR87Sj6PZK7b7wBUpDff/cLhT3NY2PGLxfcSCAn1BTohRPjo/AwNM0Hh /yHc5U8IsI7EjWh6XHNcaK6TM1nrePTu2Ofrp+Op/MQn7v3unKUjJUUtTZNaAg== ) ;; ADDITIONAL SECTION (7 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for nih.GOV/DNSKEY
	Received 584 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (584 bytes) ;; HEADER SECTION ;; id = 3199 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nih.GOV. 86400 IN NS ns.nih.GOV. nih.GOV. 86400 IN NS ns3.nih.GOV. nih.GOV. 86400 IN NS ns2.nih.GOV. nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. fWJKBjLy/hcu47pdABrEQgoxt/xyI8VXv4bffPTrydnCcXHnH02galf7cF8b9/9RF2KDJiTgQd2J rJp9g+mXFLE6BWsoUp5nGR87Sj6PZK7b7wBUpDff/cLhT3NY2PGLxfcSCAn1BTohRPjo/AwNM0Hh /yHc5U8IsI7EjWh6XHNcaK6TM1nrePTu2Ofrp+Op/MQn7v3unKUjJUUtTZNaAg== ) ;; ADDITIONAL SECTION (7 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nih.GOV

nih.GOV

	Checking DS between GOV and nih.GOV
	Query to c.gov-servers.net for nih.GOV/DS
	Received 399 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (399 bytes) ;; HEADER SECTION ;; id = 53032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DS ;; ANSWER SECTION (5 records) nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. fWJKBjLy/hcu47pdABrEQgoxt/xyI8VXv4bffPTrydnCcXHnH02galf7cF8b9/9RF2KDJiTgQd2J rJp9g+mXFLE6BWsoUp5nGR87Sj6PZK7b7wBUpDff/cLhT3NY2PGLxfcSCAn1BTohRPjo/AwNM0Hh /yHc5U8IsI7EjWh6XHNcaK6TM1nrePTu2Ofrp+Op/MQn7v3unKUjJUUtTZNaAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for nih.GOV in the GOV zone
	DS=44025/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=35355/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=44025/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=35355/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. fWJKBjLy/hcu47pdABrEQgoxt/xyI8VXv4bffPTrydnCcXHnH02galf7cF8b9/9RF2KDJiTgQd2J rJp9g+mXFLE6BWsoUp5nGR87Sj6PZK7b7wBUpDff/cLhT3NY2PGLxfcSCAn1BTohRPjo/AwNM0Hh /yHc5U8IsI7EjWh6XHNcaK6TM1nrePTu2Ofrp+Op/MQn7v3unKUjJUUtTZNaAg== )`
	RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
	DS=44025/SHA-256 is now in the chain-of-trust
	DS=35355/SHA-256 is now in the chain-of-trust
	`nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 )`
	`nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 )`
	`nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c`
	`nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d`
	Query to ns2.nih.GOV for nih.GOV/DNSKEY
	Received 1237 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (1237 bytes) ;; HEADER SECTION ;; id = 49721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) nih.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAcmkABCYCC+wl69/XkB8HkoroJ0NnYSCfICIZUqawkI97B2hWCRAmwKrrPY2QmtIO5l3yFiH dUj0cW22XVROnI2i2cgE4V/kqvz6elhWvyDP2OkgQgoDH8/UIJ88gnBclot2/iGjJ+e0jIvySTJn 91csfXIMx54ifl2PfayK81hz ) ; Key ID = 6002 nih.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAZU/azyHK7RF9WdJReYXGiZpMQufPvPSOkH3Oi7p6r81ORFjqSWwVFrVh/UnIhQH9PchtINO q58OQ+B0EB5P8J8TWGq2sIdWqRy8jemvktVYCXazHyRIePsrhd+t0ezPCcswINnNDqPKlAmiZ8vQ Z5/eA05Od5gq/OqMsoo/t0g7 ) ; Key ID = 3692 nih.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAcFsAJQcRWvmnxWgqWhqtCA8yi6k6fixeUOCOYOL8yEBg0lv33N6u5mqDcgj/1BdhjaYv+H0 e9Bjv95zxo+1qyjid2ADDtH47p3mFq0rUB115gFTWADvPnBmTeEl0cqIUcFjkSFONy5JvAamiJmf HrqwkDME9UNn4jMUipeFCYgSEslXWZZLmfUwdow7SDFa/hNG+eUMfXDiM5HAd6hsF6SAF66CjppK AQarGtuhkVPYSQj/hQzhVNhwpZN7LEdcUsqQh0R8QfhD2UXnhAwDerFrIjhUZHhfQueYQs3avDee GdTE/sQ/afzutrqKfNNFAyxTBlwRhvbooOizhQOI7jE= ) ; Key ID = 35355 nih.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200929203957 20200925201936 3692 nih.gov. fkdv/r440utr8xG6YbvtF8yUSZYkJbeMqL9MGWIiZzAql4hetFwMTul0nUDb2wiCirm083556jVF WM5EQmI4UBF34jkMQVhHCw0XWQoR6XVuJOpJ0ZqxdJYQdlZvcs+Xt9oXc95GGQG3rz1ikyX+NKke 0RX7xLrVLqfBpJbvJug= ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200929203957 20200925201936 6002 nih.gov. A9ZdSmTLCguVbaUJUVtoSCsJV88X87DZ3wCSpkBvsdZzeguN71WXYd8e7oAuVtYTgtDODnpRRhiS 0T/tchholbksh9EvAKXbE2VJh1DLqSgF0U/92gUxULoKJeOxzH4inKyhjUS+Jv4ZT64vho1qKP3n UvXSJUuBRV3dh9QPLGw= ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200929203957 20200925201936 35355 nih.gov. HlyF49TFabU2yFepdxETrIXL8RYTx7wcZvAzJEWoiQsXWmBHUPzGjFeih60hEgoOKA8Aqp6xrMJM JD9fDVO+8H4yi9REk/TJqgvXTIVthF64Ez1nrKLq6NrAsuLCnxnlvBcczyM6KR3pySrapgNBPRq5 AXjnKGZouBeewObNZZHFPsxg1fsDxNIiWBGgZkQ87Bf9al3oNLrhaStzX39aeyLZJso9zuvN90A6 gxsjBK/cf/qFtq6rVgh5NUDWCQ54FHjAFInjVWPlnpelAzUanQ5+RpqZKBMYY5N9ZN7bDWq5WgBp 8fIRkI5cqDHHQkR4sYITtC6j2mjVpVSVB7oRrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for nih.GOV
	`nih.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAcmkABCYCC+wl69/XkB8HkoroJ0NnYSCfICIZUqawkI97B2hWCRAmwKrrPY2QmtIO5l3yFiH dUj0cW22XVROnI2i2cgE4V/kqvz6elhWvyDP2OkgQgoDH8/UIJ88gnBclot2/iGjJ+e0jIvySTJn 91csfXIMx54ifl2PfayK81hz ) ; Key ID = 6002`
	`nih.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAZU/azyHK7RF9WdJReYXGiZpMQufPvPSOkH3Oi7p6r81ORFjqSWwVFrVh/UnIhQH9PchtINO q58OQ+B0EB5P8J8TWGq2sIdWqRy8jemvktVYCXazHyRIePsrhd+t0ezPCcswINnNDqPKlAmiZ8vQ Z5/eA05Od5gq/OqMsoo/t0g7 ) ; Key ID = 3692`
	`nih.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAcFsAJQcRWvmnxWgqWhqtCA8yi6k6fixeUOCOYOL8yEBg0lv33N6u5mqDcgj/1BdhjaYv+H0 e9Bjv95zxo+1qyjid2ADDtH47p3mFq0rUB115gFTWADvPnBmTeEl0cqIUcFjkSFONy5JvAamiJmf HrqwkDME9UNn4jMUipeFCYgSEslXWZZLmfUwdow7SDFa/hNG+eUMfXDiM5HAd6hsF6SAF66CjppK AQarGtuhkVPYSQj/hQzhVNhwpZN7LEdcUsqQh0R8QfhD2UXnhAwDerFrIjhUZHhfQueYQs3avDee GdTE/sQ/afzutrqKfNNFAyxTBlwRhvbooOizhQOI7jE= ) ; Key ID = 35355`
	DNSKEY=35355/SEP is now in the chain-of-trust
	DS=35355/SHA-256 verifies DNSKEY=35355/SEP
	DS=35355/SHA-1 verifies DNSKEY=35355/SEP
	DS=44025/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`nih.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200929203957 20200925201936 3692 nih.gov. fkdv/r440utr8xG6YbvtF8yUSZYkJbeMqL9MGWIiZzAql4hetFwMTul0nUDb2wiCirm083556jVF WM5EQmI4UBF34jkMQVhHCw0XWQoR6XVuJOpJ0ZqxdJYQdlZvcs+Xt9oXc95GGQG3rz1ikyX+NKke 0RX7xLrVLqfBpJbvJug= )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200929203957 20200925201936 6002 nih.gov. A9ZdSmTLCguVbaUJUVtoSCsJV88X87DZ3wCSpkBvsdZzeguN71WXYd8e7oAuVtYTgtDODnpRRhiS 0T/tchholbksh9EvAKXbE2VJh1DLqSgF0U/92gUxULoKJeOxzH4inKyhjUS+Jv4ZT64vho1qKP3n UvXSJUuBRV3dh9QPLGw= )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200929203957 20200925201936 35355 nih.gov. HlyF49TFabU2yFepdxETrIXL8RYTx7wcZvAzJEWoiQsXWmBHUPzGjFeih60hEgoOKA8Aqp6xrMJM JD9fDVO+8H4yi9REk/TJqgvXTIVthF64Ez1nrKLq6NrAsuLCnxnlvBcczyM6KR3pySrapgNBPRq5 AXjnKGZouBeewObNZZHFPsxg1fsDxNIiWBGgZkQ87Bf9al3oNLrhaStzX39aeyLZJso9zuvN90A6 gxsjBK/cf/qFtq6rVgh5NUDWCQ54FHjAFInjVWPlnpelAzUanQ5+RpqZKBMYY5N9ZN7bDWq5WgBp 8fIRkI5cqDHHQkR4sYITtC6j2mjVpVSVB7oRrA== )`
	RRSIG=3692 and DNSKEY=3692 verifies the DNSKEY RRset
	RRSIG=6002 and DNSKEY=6002 verifies the DNSKEY RRset
	RRSIG=35355 and DNSKEY=35355/SEP verifies the DNSKEY RRset
	DNSKEY=6002 is now in the chain-of-trust
	DNSKEY=3692 is now in the chain-of-trust
	Query to ns3.nih.GOV for medlineplus.awsprod.nlm.nih.GOV/A
	Received 621 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (621 bytes) ;; HEADER SECTION ;; id = 65526 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.GOV. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 86400 IN NS ns-584.awsdns-09.net. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN NSEC3 ( 1 0 10 - a5p8l4na5fr3gmi0rc17krbdunipag5j NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN RRSIG ( NSEC3 7 4 3600 20201014102654 20200914102154 48374 nlm.nih.gov. CrYGfjIPfPFslKwC+yPEg0S9gFr6bh+AUrwBr8c4ViJd8JZ94TE28JPYqqepcWAYCsO/uKoyXHLM vXX4pFCEQI7pa1znEmZ7p8HZlFDv+C+pUpqMz8NkQItu8p+K/XHMyBhukKbs81uOk6aPwkczn3iD 39B4t0Rc2wA5Ozr+cZk= ) ;; ADDITIONAL SECTION (9 records) ns-226.awsdns-28.com. 140791 IN A 205.251.192.226 ns-1125.awsdns-12.org. 141693 IN A 205.251.196.101 ns-1890.awsdns-44.co.uk. 170429 IN A 205.251.199.98 ns-584.awsdns-09.net. 168392 IN A 205.251.194.72 ns-226.awsdns-28.com. 168238 IN AAAA 2600:9000:5300:e200::1 ns-1125.awsdns-12.org. 168418 IN AAAA 2600:9000:5304:6500::1 ns-1890.awsdns-44.co.uk. 170429 IN AAAA 2600:9000:5307:6200::1 ns-584.awsdns-09.net. 141693 IN AAAA 2600:9000:5302:4800::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.nih.GOV for nlm.nih.GOV/DNSKEY
	Received 934 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (934 bytes) ;; HEADER SECTION ;; id = 21445 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nlm.nih.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbukPSEDHxMAwAeNYoEeSKLsT4QMflPpgT1wS9GYNdyu2cRJb0IO1PAG8fYEpPSaLEkeGxbQ PIipfHVZZpOBI7/I1ySB92aqJxfh+d8e8OopcMyX19g5E/2zZDQvWQfX9U9iHtNOqATo8cYG612D oKtb1QIZiPcUj9StUtF5u+4FENZaZowOwYQ/pcsApQy/Jj8t4vBQbFM4S9EA5Brop+3iCngd9fjA o09CbWr8MkzhUOsroB6ocMAUtYR3WaHeLrf1GxBH2I/GA+AtDzmWhfa4OtEo/ADa8KdiMR7Iwge+ W9W73zjHdxTsWdpMuG3UT7QKhIdc0mnXtjV750RixMM= ) ; Key ID = 43224 nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAcyzvBD4TA6MA6+H1Fsn/BsoD4OOFredlIe7AhcIUUSfliF3HyECraMBYUtOIcbwkQmUGYcm EE0B8Q/mBkh8z0R32j6PVs+hvP41FpaTxwNYqff7BBiu83LOH3Ey9sc7pOKlB12fOCQE69BKCJRJ 1Tj8B/UEtO9kfxsOgolJEJFt ) ; Key ID = 48374 nlm.nih.GOV. 3600 IN RRSIG ( DNSKEY 7 3 3600 20201014102654 20200914102154 43224 nlm.nih.gov. nUfPJgZC0B4mjywOxcydG9k341hFEej7Law36jW2Nt+29T2j0OlyQ7fCeSCCrvqtmq8vbUaZlGOD l0WKJqDK8SVkx7wzybCKmFRqVvrf3VZ4P0dbcw0LzcThlWr6AUem/1PObYXMb5vxyFo4lNaIUCIG l41XAvnv88Ekb76//VDnBbzYroGRM7OWO9ljUPd52sSIQBY4UbjPNPg+BibRat+3OdnMmCbRQOTj vLV4JMA32VkiNMLhL7bFYHIWWiqC/M5wHWhQUbbl0hYVmOck+3gsCd+kAP9kdz2pstdlKL+ubfTc yxkdkmZ/oEh11Vp6w11myK5J/fjXREOAAg7w0w== ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20201014102654 20200914102154 48374 nlm.nih.gov. xEY3c4DH5yUHo1xQhO7hUGV98sShLktRO07BC+QbfqXuAFa0dkLMV3PWAXhdHOYkLqUm2+cVF1fX 3OZ1l0s2Q92Dpjf7Dc+DTWzUZXr7h37q7RWMNu0HEm5c/8Fx1FadNpu9u6tSsDGQMaBVqegzj4QZ A/R1l69tuXNu8FC2gLI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nlm.nih.GOV
	Attempting to learn nameservers for nlm.nih.GOV
	Query to ns3.nih.GOV for nlm.nih.GOV/NS
	Received 306 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (306 bytes) ;; HEADER SECTION ;; id = 38870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN NS ;; ANSWER SECTION (6 records) nlm.nih.GOV. 3600 IN NS lhcns1.nlm.nih.GOV. nlm.nih.GOV. 3600 IN NS lhcns2.nlm.nih.GOV. nlm.nih.GOV. 3600 IN NS ns.nih.GOV. nlm.nih.GOV. 3600 IN NS ns3.nih.GOV. nlm.nih.GOV. 3600 IN NS ns2.nih.GOV. nlm.nih.GOV. 3600 IN RRSIG ( NS 7 3 3600 20201014102654 20200914102154 48374 nlm.nih.gov. NLXowuqy/kPZfVTNgpYKGfBCKHhsfwkaPklQu2/eNOoACUc1/5j9T9F+CVHvywxgDWnFVrIvnR/n EC1ufYR48DNpethVAWpQLc6VoJVJxZo2ODbdWQ0Dtf8lnRXmgv9GmQ1YE/0crW5R3vOLCGydf4JA uYw905NTwaoYhIB8yfM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found nlm.nih.GOV nameservers: lhcns1.nlm.nih.GOV, lhcns2.nlm.nih.GOV, ns.nih.GOV, ns3.nih.GOV, ns2.nih.GOV

nlm.nih.GOV

	Checking DS between nih.GOV and nlm.nih.GOV
	Query to ns.nih.GOV for nlm.nih.GOV/DS
	Received 470 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (470 bytes) ;; HEADER SECTION ;; id = 60532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DS ;; ANSWER SECTION (4 records) nlm.nih.GOV. 7200 IN DS ( 43224 7 2 862ca6cc23d78edfe7a5c846328bc0521627f48ac06a601df8d462251969b28a ) nlm.nih.GOV. 7200 IN DS ( 14674 7 2 fd00329146ac9c30acaab5edfa9f8b56b548b6e3dd66a11d2505ecb471807d80 ) nlm.nih.GOV. 7200 IN RRSIG ( DS 7 3 7200 20200929202932 20200925194630 3692 nih.gov. IRDBs/SxVAFgMWQRh1Nk9Rl8W3jBkVu/3E9fSo7dQV6KneDzu/tCi8k6jXbngsfvyVWzZbS2F5Gp BV5dyT1FaJQOj+i0U6X7tsDVUlI5Ovqtzo5h8YzFbgGuwEdKyv6C5CkW/fkq5wqaPIl6PWe1fMHH tkB274qFiL59QNXeMp4= ) nlm.nih.GOV. 7200 IN RRSIG ( DS 7 3 7200 20200929202932 20200925194630 6002 nih.gov. Htiyg3uO4l6y/tqx//BLxvqRto94NI6ZA3wcUSVpzbf1DtRDFoioIRhXhRO9SRoQMuztxWhJqRTq 1okLamAGFNMxpPgnFb3jB5wY7/EN5T7GfhFSlUzqW4bf2oe1FwHUXksWjh7w6NfBTIxlTakW4Ulc hfSD3zES7pTOTL6oVoI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for nlm.nih.GOV in the nih.GOV zone
	DS=43224/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=14674/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 2 RRSIGs over DS RRset
	`nlm.nih.GOV. 7200 IN RRSIG ( DS 7 3 7200 20200929202932 20200925194630 3692 nih.gov. IRDBs/SxVAFgMWQRh1Nk9Rl8W3jBkVu/3E9fSo7dQV6KneDzu/tCi8k6jXbngsfvyVWzZbS2F5Gp BV5dyT1FaJQOj+i0U6X7tsDVUlI5Ovqtzo5h8YzFbgGuwEdKyv6C5CkW/fkq5wqaPIl6PWe1fMHH tkB274qFiL59QNXeMp4= )`
	`nlm.nih.GOV. 7200 IN RRSIG ( DS 7 3 7200 20200929202932 20200925194630 6002 nih.gov. Htiyg3uO4l6y/tqx//BLxvqRto94NI6ZA3wcUSVpzbf1DtRDFoioIRhXhRO9SRoQMuztxWhJqRTq 1okLamAGFNMxpPgnFb3jB5wY7/EN5T7GfhFSlUzqW4bf2oe1FwHUXksWjh7w6NfBTIxlTakW4Ulc hfSD3zES7pTOTL6oVoI= )`
	RRSIG=3692 and DNSKEY=3692 verifies the DS RRset
	RRSIG=6002 and DNSKEY=6002 verifies the DS RRset
	DS=43224/SHA-256 is now in the chain-of-trust
	DS=14674/SHA-256 is now in the chain-of-trust
	`nlm.nih.GOV. 7200 IN DS ( 43224 7 2 862ca6cc23d78edfe7a5c846328bc0521627f48ac06a601df8d462251969b28a )`
	`nlm.nih.GOV. 7200 IN DS ( 14674 7 2 fd00329146ac9c30acaab5edfa9f8b56b548b6e3dd66a11d2505ecb471807d80 )`
	Query to lhcns1.nlm.nih.GOV for nlm.nih.GOV/DNSKEY
	Received 945 bytes from 130.14.55.72
	;; Answer received from 130.14.55.72 (945 bytes) ;; HEADER SECTION ;; id = 12510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nlm.nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAcyzvBD4TA6MA6+H1Fsn/BsoD4OOFredlIe7AhcIUUSfliF3HyECraMBYUtOIcbwkQmUGYcm EE0B8Q/mBkh8z0R32j6PVs+hvP41FpaTxwNYqff7BBiu83LOH3Ey9sc7pOKlB12fOCQE69BKCJRJ 1Tj8B/UEtO9kfxsOgolJEJFt ) ; Key ID = 48374 nlm.nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAbukPSEDHxMAwAeNYoEeSKLsT4QMflPpgT1wS9GYNdyu2cRJb0IO1PAG8fYEpPSaLEkeGxbQ PIipfHVZZpOBI7/I1ySB92aqJxfh+d8e8OopcMyX19g5E/2zZDQvWQfX9U9iHtNOqATo8cYG612D oKtb1QIZiPcUj9StUtF5u+4FENZaZowOwYQ/pcsApQy/Jj8t4vBQbFM4S9EA5Brop+3iCngd9fjA o09CbWr8MkzhUOsroB6ocMAUtYR3WaHeLrf1GxBH2I/GA+AtDzmWhfa4OtEo/ADa8KdiMR7Iwge+ W9W73zjHdxTsWdpMuG3UT7QKhIdc0mnXtjV750RixMM= ) ; Key ID = 43224 nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20201014102654 20200914102154 43224 nlm.nih.gov. nUfPJgZC0B4mjywOxcydG9k341hFEej7Law36jW2Nt+29T2j0OlyQ7fCeSCCrvqtmq8vbUaZlGOD l0WKJqDK8SVkx7wzybCKmFRqVvrf3VZ4P0dbcw0LzcThlWr6AUem/1PObYXMb5vxyFo4lNaIUCIG l41XAvnv88Ekb76//VDnBbzYroGRM7OWO9ljUPd52sSIQBY4UbjPNPg+BibRat+3OdnMmCbRQOTj vLV4JMA32VkiNMLhL7bFYHIWWiqC/M5wHWhQUbbl0hYVmOck+3gsCd+kAP9kdz2pstdlKL+ubfTc yxkdkmZ/oEh11Vp6w11myK5J/fjXREOAAg7w0w== ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20201014102654 20200914102154 48374 nlm.nih.gov. xEY3c4DH5yUHo1xQhO7hUGV98sShLktRO07BC+QbfqXuAFa0dkLMV3PWAXhdHOYkLqUm2+cVF1fX 3OZ1l0s2Q92Dpjf7Dc+DTWzUZXr7h37q7RWMNu0HEm5c/8Fx1FadNpu9u6tSsDGQMaBVqegzj4QZ A/R1l69tuXNu8FC2gLI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nlm.nih.GOV
	`nlm.nih.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAcyzvBD4TA6MA6+H1Fsn/BsoD4OOFredlIe7AhcIUUSfliF3HyECraMBYUtOIcbwkQmUGYcm EE0B8Q/mBkh8z0R32j6PVs+hvP41FpaTxwNYqff7BBiu83LOH3Ey9sc7pOKlB12fOCQE69BKCJRJ 1Tj8B/UEtO9kfxsOgolJEJFt ) ; Key ID = 48374`
	`nlm.nih.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAbukPSEDHxMAwAeNYoEeSKLsT4QMflPpgT1wS9GYNdyu2cRJb0IO1PAG8fYEpPSaLEkeGxbQ PIipfHVZZpOBI7/I1ySB92aqJxfh+d8e8OopcMyX19g5E/2zZDQvWQfX9U9iHtNOqATo8cYG612D oKtb1QIZiPcUj9StUtF5u+4FENZaZowOwYQ/pcsApQy/Jj8t4vBQbFM4S9EA5Brop+3iCngd9fjA o09CbWr8MkzhUOsroB6ocMAUtYR3WaHeLrf1GxBH2I/GA+AtDzmWhfa4OtEo/ADa8KdiMR7Iwge+ W9W73zjHdxTsWdpMuG3UT7QKhIdc0mnXtjV750RixMM= ) ; Key ID = 43224`
	DNSKEY=43224/SEP is now in the chain-of-trust
	DS=43224/SHA-256 verifies DNSKEY=43224/SEP
	DS=14674/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20201014102654 20200914102154 43224 nlm.nih.gov. nUfPJgZC0B4mjywOxcydG9k341hFEej7Law36jW2Nt+29T2j0OlyQ7fCeSCCrvqtmq8vbUaZlGOD l0WKJqDK8SVkx7wzybCKmFRqVvrf3VZ4P0dbcw0LzcThlWr6AUem/1PObYXMb5vxyFo4lNaIUCIG l41XAvnv88Ekb76//VDnBbzYroGRM7OWO9ljUPd52sSIQBY4UbjPNPg+BibRat+3OdnMmCbRQOTj vLV4JMA32VkiNMLhL7bFYHIWWiqC/M5wHWhQUbbl0hYVmOck+3gsCd+kAP9kdz2pstdlKL+ubfTc yxkdkmZ/oEh11Vp6w11myK5J/fjXREOAAg7w0w== )`
	`nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20201014102654 20200914102154 48374 nlm.nih.gov. xEY3c4DH5yUHo1xQhO7hUGV98sShLktRO07BC+QbfqXuAFa0dkLMV3PWAXhdHOYkLqUm2+cVF1fX 3OZ1l0s2Q92Dpjf7Dc+DTWzUZXr7h37q7RWMNu0HEm5c/8Fx1FadNpu9u6tSsDGQMaBVqegzj4QZ A/R1l69tuXNu8FC2gLI= )`
	RRSIG=43224 and DNSKEY=43224/SEP verifies the DNSKEY RRset
	RRSIG=48374 and DNSKEY=48374 verifies the DNSKEY RRset
	DNSKEY=48374 is now in the chain-of-trust
	Query to ns2.nih.GOV for medlineplus.awsprod.nlm.nih.GOV/A
	Received 621 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (621 bytes) ;; HEADER SECTION ;; id = 2602 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.GOV. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.GOV. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 86400 IN NS ns-1125.awsdns-12.org. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN NSEC3 ( 1 0 10 - a5p8l4na5fr3gmi0rc17krbdunipag5j NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN RRSIG ( NSEC3 7 4 3600 20201014102654 20200914102154 48374 nlm.nih.gov. CrYGfjIPfPFslKwC+yPEg0S9gFr6bh+AUrwBr8c4ViJd8JZ94TE28JPYqqepcWAYCsO/uKoyXHLM vXX4pFCEQI7pa1znEmZ7p8HZlFDv+C+pUpqMz8NkQItu8p+K/XHMyBhukKbs81uOk6aPwkczn3iD 39B4t0Rc2wA5Ozr+cZk= ) ;; ADDITIONAL SECTION (9 records) ns-226.awsdns-28.com. 140791 IN A 205.251.192.226 ns-1125.awsdns-12.org. 82235 IN A 205.251.196.101 ns-1890.awsdns-44.co.uk. 170429 IN A 205.251.199.98 ns-584.awsdns-09.net. 168392 IN A 205.251.194.72 ns-226.awsdns-28.com. 171389 IN AAAA 2600:9000:5300:e200::1 ns-1125.awsdns-12.org. 168418 IN AAAA 2600:9000:5304:6500::1 ns-1890.awsdns-44.co.uk. 168392 IN AAAA 2600:9000:5307:6200::1 ns-584.awsdns-09.net. 168418 IN AAAA 2600:9000:5302:4800::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nih.GOV for awsprod.nlm.nih.GOV/DNSKEY
	Received 609 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (609 bytes) ;; HEADER SECTION ;; id = 57876 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.GOV. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.GOV. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 86400 IN NS ns-1125.awsdns-12.org. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN NSEC3 ( 1 0 10 - a5p8l4na5fr3gmi0rc17krbdunipag5j NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN RRSIG ( NSEC3 7 4 3600 20201014102654 20200914102154 48374 nlm.nih.gov. CrYGfjIPfPFslKwC+yPEg0S9gFr6bh+AUrwBr8c4ViJd8JZ94TE28JPYqqepcWAYCsO/uKoyXHLM vXX4pFCEQI7pa1znEmZ7p8HZlFDv+C+pUpqMz8NkQItu8p+K/XHMyBhukKbs81uOk6aPwkczn3iD 39B4t0Rc2wA5Ozr+cZk= ) ;; ADDITIONAL SECTION (9 records) ns-226.awsdns-28.com. 140791 IN A 205.251.192.226 ns-1125.awsdns-12.org. 82235 IN A 205.251.196.101 ns-1890.awsdns-44.co.uk. 170429 IN A 205.251.199.98 ns-584.awsdns-09.net. 168392 IN A 205.251.194.72 ns-226.awsdns-28.com. 171389 IN AAAA 2600:9000:5300:e200::1 ns-1125.awsdns-12.org. 168418 IN AAAA 2600:9000:5304:6500::1 ns-1890.awsdns-44.co.uk. 168392 IN AAAA 2600:9000:5307:6200::1 ns-584.awsdns-09.net. 168418 IN AAAA 2600:9000:5302:4800::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone awsprod.nlm.nih.GOV

awsprod.nlm.nih.GOV

	Checking DS between nlm.nih.GOV and awsprod.nlm.nih.GOV
	Query to ns2.nih.GOV for awsprod.nlm.nih.GOV/DS
	Received 529 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (529 bytes) ;; HEADER SECTION ;; id = 8218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlm.nih.GOV. 3600 IN SOA ( lhcns1.nlm.nih.GOV. nlmdnshostmaster.mail.nih.GOV. 619075658 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nlm.nih.GOV. 3600 IN RRSIG ( SOA 7 3 3600 20201026001457 20200925231457 48374 nlm.nih.gov. LHNv0I3Khu+Mm+v0ZuH5kRyGFwgD9wEKf2nkIqFzl/0dT0QA5xZi9xo2JB88eALiJ4a8YsxypMq2 zoC3Hf1IX8qaGbIBatdrOXOdLTuqtX26iDEICf/+zKANO9KufCfHSbUx6n0ietilkhapFPfWFccs utUCRHMfNeJxgzecCeU= ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a5p8l4na5fr3gmi0rc17krbdunipag5j NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20201014102654 20200914102154 48374 nlm.nih.gov. CrYGfjIPfPFslKwC+yPEg0S9gFr6bh+AUrwBr8c4ViJd8JZ94TE28JPYqqepcWAYCsO/uKoyXHLM vXX4pFCEQI7pa1znEmZ7p8HZlFDv+C+pUpqMz8NkQItu8p+K/XHMyBhukKbs81uOk6aPwkczn3iD 39B4t0Rc2wA5Ozr+cZk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for awsprod.nlm.nih.GOV in the nlm.nih.GOV zone
	Query to ns-1890.awsdns-44.co.uk for awsprod.nlm.nih.GOV/DNSKEY
	Received 135 bytes from 205.251.199.98
	;; Answer received from 205.251.199.98 (135 bytes) ;; HEADER SECTION ;; id = 7523 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-1125.awsdns-12.org for medlineplus.awsprod.nlm.nih.GOV/A
	Received 264 bytes from 205.251.196.101
	;; Answer received from 205.251.196.101 (264 bytes) ;; HEADER SECTION ;; id = 27951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.222.95 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.222.44 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.222.70 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.222.6 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	awsprod.nlm.nih.GOV is authoritative for medlineplus.awsprod.nlm.nih.GOV
	Query to ns-584.awsdns-09.net for medlineplus.awsprod.nlm.nih.GOV/DNSKEY
	Received 147 bytes from 205.251.194.72
	;; Answer received from 205.251.194.72 (147 bytes) ;; HEADER SECTION ;; id = 48693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1890.awsdns-44.co.uk for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.199.98
	;; Answer received from 205.251.199.98 (249 bytes) ;; HEADER SECTION ;; id = 25762 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-226.awsdns-28.com for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (249 bytes) ;; HEADER SECTION ;; id = 16683 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-584.awsdns-09.net for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.194.72
	;; Answer received from 205.251.194.72 (249 bytes) ;; HEADER SECTION ;; id = 46978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1125.awsdns-12.org for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.196.101
	;; Answer received from 205.251.196.101 (249 bytes) ;; HEADER SECTION ;; id = 62066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1125.awsdns-12.org for medlineplus.awsprod.nlm.nih.GOV/A
	Received 264 bytes from 205.251.196.101
	;; Answer received from 205.251.196.101 (264 bytes) ;; HEADER SECTION ;; id = 57573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.222.95 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.222.44 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.222.6 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 99.84.222.70 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	medlineplus.awsprod.nlm.nih.GOV A RR has value 99.84.222.95
	medlineplus.awsprod.nlm.nih.GOV A RR has value 99.84.222.44
	medlineplus.awsprod.nlm.nih.GOV A RR has value 99.84.222.6
	medlineplus.awsprod.nlm.nih.GOV A RR has value 99.84.222.70
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MEDLINEPLUS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: