DNSSEC Analyzer - MEDLINEPLUS.GOV

Domain Name:

Time: 2020-04-09 08:24:30 UTC, NTP stratum 4

Analyzing DNSSEC problems for MEDLINEPLUS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1139 bytes) ;; HEADER SECTION ;; id = 10684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	DNSKEY=33853 is now in the chain-of-trust
	Query to m.root-servers.net for MEDLINEPLUS.GOV/A
	Received 673 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (673 bytes) ;; HEADER SECTION ;; id = 42038 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . VfRp7ELpShyr5ClA3xw5IHHRUJ8LjaaME/QUFJj9pmMQ4zDnsip2Ol7cjA7q2NuU6MRgEaV/zcIU aPUkr7A8D9bNHoAFdiDpUs3JPdUJ9LCoTjSGRpjPC6LJBVg7J2s0WGqsKnYnDiyEYoYmiVUyYp1n gXRvHGXmggEYVm4iBOQAlbOGEbfHRkGOuDtF+NontHMPO3fZIsFwqrCxuaPT9m7faHs/ON1mNNxP dp3AgzhabJ1YkkXOsWAAsLKsXmZ3UKjO6/PJNY0nzTRr/qI4gb6Nd+XHmj9QfqeGbT5nXmJmu3Kc jjkrsjbdYTFe5C2LQxXHQ2PgDzfpm5ekm+8gbQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (658 bytes) ;; HEADER SECTION ;; id = 13335 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . VfRp7ELpShyr5ClA3xw5IHHRUJ8LjaaME/QUFJj9pmMQ4zDnsip2Ol7cjA7q2NuU6MRgEaV/zcIU aPUkr7A8D9bNHoAFdiDpUs3JPdUJ9LCoTjSGRpjPC6LJBVg7J2s0WGqsKnYnDiyEYoYmiVUyYp1n gXRvHGXmggEYVm4iBOQAlbOGEbfHRkGOuDtF+NontHMPO3fZIsFwqrCxuaPT9m7faHs/ON1mNNxP dp3AgzhabJ1YkkXOsWAAsLKsXmZ3UKjO6/PJNY0nzTRr/qI4gb6Nd+XHmj9QfqeGbT5nXmJmu3Kc jjkrsjbdYTFe5C2LQxXHQ2PgDzfpm5ekm+8gbQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 29618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . VfRp7ELpShyr5ClA3xw5IHHRUJ8LjaaME/QUFJj9pmMQ4zDnsip2Ol7cjA7q2NuU6MRgEaV/zcIU aPUkr7A8D9bNHoAFdiDpUs3JPdUJ9LCoTjSGRpjPC6LJBVg7J2s0WGqsKnYnDiyEYoYmiVUyYp1n gXRvHGXmggEYVm4iBOQAlbOGEbfHRkGOuDtF+NontHMPO3fZIsFwqrCxuaPT9m7faHs/ON1mNNxP dp3AgzhabJ1YkkXOsWAAsLKsXmZ3UKjO6/PJNY0nzTRr/qI4gb6Nd+XHmj9QfqeGbT5nXmJmu3Kc jjkrsjbdYTFe5C2LQxXHQ2PgDzfpm5ekm+8gbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . VfRp7ELpShyr5ClA3xw5IHHRUJ8LjaaME/QUFJj9pmMQ4zDnsip2Ol7cjA7q2NuU6MRgEaV/zcIU aPUkr7A8D9bNHoAFdiDpUs3JPdUJ9LCoTjSGRpjPC6LJBVg7J2s0WGqsKnYnDiyEYoYmiVUyYp1n gXRvHGXmggEYVm4iBOQAlbOGEbfHRkGOuDtF+NontHMPO3fZIsFwqrCxuaPT9m7faHs/ON1mNNxP dp3AgzhabJ1YkkXOsWAAsLKsXmZ3UKjO6/PJNY0nzTRr/qI4gb6Nd+XHmj9QfqeGbT5nXmJmu3Kc jjkrsjbdYTFe5C2LQxXHQ2PgDzfpm5ekm+8gbQ== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 62529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200414190254 20200330185754 7698 gov. eaZw0hRg+S8eg4O/3jBHDIuZnsV8O9W68yMQFeF21bkiKZh7X7O+/H8Vdsu2fbCa1ejR6xe70wZl FYsPIHXannKenlzwuCe1WtuSiLFn1NDKscZexHmBOtCisLK+6vknxj8Q4/R6fwClA432ZoTNOd2U mSwSo3tb53vELrDgbAh9iWJVQjbGMZVxjKpQzTGc+VEJiNcerDvhFdqMG4Q2P1KTYEhnyDt1ptn2 Rx+LJs40cYuZYIXUO9PAwNWkmNSNsyIt3yrG2o7KNFoLhmnhHuubGJAVE8YqekUjcpICspZE2/xl gPPM0ZGSAOx7w7AUA6FkUMWgYgCo4oc8ZzbA6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200414190254 20200330185754 7698 gov. eaZw0hRg+S8eg4O/3jBHDIuZnsV8O9W68yMQFeF21bkiKZh7X7O+/H8Vdsu2fbCa1ejR6xe70wZl FYsPIHXannKenlzwuCe1WtuSiLFn1NDKscZexHmBOtCisLK+6vknxj8Q4/R6fwClA432ZoTNOd2U mSwSo3tb53vELrDgbAh9iWJVQjbGMZVxjKpQzTGc+VEJiNcerDvhFdqMG4Q2P1KTYEhnyDt1ptn2 Rx+LJs40cYuZYIXUO9PAwNWkmNSNsyIt3yrG2o7KNFoLhmnhHuubGJAVE8YqekUjcpICspZE2/xl gPPM0ZGSAOx7w7AUA6FkUMWgYgCo4oc8ZzbA6g== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to a.gov-servers.net for MEDLINEPLUS.GOV/A
	Received 442 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (442 bytes) ;; HEADER SECTION ;; id = 42355 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) MEDLINEPLUS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. ZQlTNMTyaWpvDachFCgPMCBFaWEB9pVnUe1a9lSvw0FOttxRMfbyvRc2GGBi7pb3N0OS7bzOZTqq sAyTta+b/5Bt9M9xlDqluyiOT2oSepaNC3SDOcrMquxwAiNRT/OFaoEzWVXttmzVz4Gpi9BXDiRJ VzwA3z+ZVb0od3n1CF9isMjPRlOSKnYqxn3XhqmUs8KwT4pFv7jG5U+jmCSZfg== ) ;; ADDITIONAL SECTION (4 records) gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for MEDLINEPLUS.GOV/DNSKEY
	Received 442 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (442 bytes) ;; HEADER SECTION ;; id = 22074 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) MEDLINEPLUS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MEDLINEPLUS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. ZQlTNMTyaWpvDachFCgPMCBFaWEB9pVnUe1a9lSvw0FOttxRMfbyvRc2GGBi7pb3N0OS7bzOZTqq sAyTta+b/5Bt9M9xlDqluyiOT2oSepaNC3SDOcrMquxwAiNRT/OFaoEzWVXttmzVz4Gpi9BXDiRJ VzwA3z+ZVb0od3n1CF9isMjPRlOSKnYqxn3XhqmUs8KwT4pFv7jG5U+jmCSZfg== ) ;; ADDITIONAL SECTION (4 records) gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MEDLINEPLUS.GOV

MEDLINEPLUS.GOV

	Checking DS between GOV and MEDLINEPLUS.GOV
	Query to a.gov-servers.net for MEDLINEPLUS.GOV/DS
	Received 323 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (323 bytes) ;; HEADER SECTION ;; id = 45141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DS ;; ANSWER SECTION (3 records) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 ) MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce ) MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. ZQlTNMTyaWpvDachFCgPMCBFaWEB9pVnUe1a9lSvw0FOttxRMfbyvRc2GGBi7pb3N0OS7bzOZTqq sAyTta+b/5Bt9M9xlDqluyiOT2oSepaNC3SDOcrMquxwAiNRT/OFaoEzWVXttmzVz4Gpi9BXDiRJ VzwA3z+ZVb0od3n1CF9isMjPRlOSKnYqxn3XhqmUs8KwT4pFv7jG5U+jmCSZfg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for MEDLINEPLUS.GOV in the GOV zone
	DS=30870/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=30870/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`MEDLINEPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. ZQlTNMTyaWpvDachFCgPMCBFaWEB9pVnUe1a9lSvw0FOttxRMfbyvRc2GGBi7pb3N0OS7bzOZTqq sAyTta+b/5Bt9M9xlDqluyiOT2oSepaNC3SDOcrMquxwAiNRT/OFaoEzWVXttmzVz4Gpi9BXDiRJ VzwA3z+ZVb0od3n1CF9isMjPRlOSKnYqxn3XhqmUs8KwT4pFv7jG5U+jmCSZfg== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=30870/SHA-1 is now in the chain-of-trust
	`MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 1 b73c974eaae38c56292159fc8ced030f1f3427e8 )`
	`MEDLINEPLUS.GOV. 3600 IN DS ( 30870 7 2 c31c537f79c901b0cd92c1c49ab7ab3a8476cd5b5e0ec7fb8bdf7868121ec2ce )`
	Query to gslb02.nlm.nih.GOV for MEDLINEPLUS.GOV/DNSKEY
	Received 1202 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (1202 bytes) ;; HEADER SECTION ;; id = 40853 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAc9XflNiZCBGHpwTw6pHrnuwI0vTvwGsJBUFAKAU+q51Ra4q7s/bgbbOEFdAOdzdNDWovj0Y ZJ2aHOUIA/P28xn0rVJt4z8TAYqOEMyxeUgaDABpbfsEAKmSVTRj9D5wf0ImLdCDLzUykAhdH13R RgRtsDTIcXa+xQ3zapIkLKF7zJchLxlpVkQPBpeMw2rF2mrYNv1wM9Pzf7gieIqnAyHRVZ+eymV2 UeyurHh3vMOO4PmXUI5mMIuKscvTihOvj6MmBW7t5CbMAkVA6Hymt1Eold1IhVHx+HxzTuwQ98nx hsjqzBEEvFMY0g4aFVi/rrxc/8OejYwwWyhRqR3Ls18= ) ; Key ID = 30870 MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAblrLAPr4kvce/QDkcRIf86BXFgJAFGWt4Kmfp6+npCkf6E0RtmumunRVB6tMKhgVdqykCF8 yjFQ75D3XRffLVQkY/enq6J3y5xtDG5dhe6bt5CmZ4p3XDRaiqMWWV7RMP0UErMo5Xhupy7xXDvb Vqrh3DOrN75MDp5CWk8egA6yOTCNXXupSv+5jdRjkjnM297W8JE9Dl3N3EPNT/gpcQWSY75cFLGv 653++GbVu00TBQ9+Q6Csq5ZybgbFW0Z+WrmaASsceO9jUKX1weNOqsMPHgWuPdfQY+SM5oI94mTc 1U5mEjkBXZSzavedEero+f+J+PnRulLmbA/NJoHAsNE= ) ; Key ID = 59630 MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200423215703 20200402215703 30870 medlineplus.gov. ffHNdj3frAWrS2rwDhoX4VKDzQU0zjCTMAEZInfRhrXHe0LyHdFQujghC/fS3UNUA+brHW4I0gvc VkKpa7TvnNPgdNsZKkBfRQIa2PjDigADk0qL3B6LrDahcEkfIs1pCVRIL+VmbjPgJdcQTkChHySK RQH69hxPUpnUmLIy52YXJcRSd8rSIRLVX+FEFJ6OiWSzTyVvRyisxZECUBJ2xq9sVtB+htRpcxeT QEOFEo+uMs6sl+c/x15nErSLDHIyycQ6wgltQ+nLcmXTxP6kANlBK+Ixwky+B2ohbEYTqzs8W8Fe I1LTNqnEjnsj3QqfW2CesYWQObMrb33+bakypw== ) MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200423095704 20200402095704 59630 medlineplus.gov. oLeucU5nqV3YaUiCZhqtEf8RcfAOLHzstWUUniMA5RtGTyfioDw1u7g9CFgGaeDI4LRB/lkoD6cD 2Y50969Jo+6sm86RBrBrltcUMXDBpKp7IZVRvOc7SBod9e3ZfXmETwCVvp+DBgQbFUag/B7EPXyE +dl0sERGti6jNpaBBwa2ak6k6CMhEqZZMd2v+cuQwkQw7MqYok5xcSzEjQ6U65gg63894kih8IOe SuuRZpaNuz1JC6sE6lQPLGeDmquyVA9LDYNQwEWM/akiW9mAYoEI3ZIwNqJRcbnS/VkwL5OLAcwm oYXcHm6T3WNQnRFxd0JDpy1iQMDHvaS0qhIVdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for MEDLINEPLUS.GOV
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAc9XflNiZCBGHpwTw6pHrnuwI0vTvwGsJBUFAKAU+q51Ra4q7s/bgbbOEFdAOdzdNDWovj0Y ZJ2aHOUIA/P28xn0rVJt4z8TAYqOEMyxeUgaDABpbfsEAKmSVTRj9D5wf0ImLdCDLzUykAhdH13R RgRtsDTIcXa+xQ3zapIkLKF7zJchLxlpVkQPBpeMw2rF2mrYNv1wM9Pzf7gieIqnAyHRVZ+eymV2 UeyurHh3vMOO4PmXUI5mMIuKscvTihOvj6MmBW7t5CbMAkVA6Hymt1Eold1IhVHx+HxzTuwQ98nx hsjqzBEEvFMY0g4aFVi/rrxc/8OejYwwWyhRqR3Ls18= ) ; Key ID = 30870`
	`MEDLINEPLUS.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAblrLAPr4kvce/QDkcRIf86BXFgJAFGWt4Kmfp6+npCkf6E0RtmumunRVB6tMKhgVdqykCF8 yjFQ75D3XRffLVQkY/enq6J3y5xtDG5dhe6bt5CmZ4p3XDRaiqMWWV7RMP0UErMo5Xhupy7xXDvb Vqrh3DOrN75MDp5CWk8egA6yOTCNXXupSv+5jdRjkjnM297W8JE9Dl3N3EPNT/gpcQWSY75cFLGv 653++GbVu00TBQ9+Q6Csq5ZybgbFW0Z+WrmaASsceO9jUKX1weNOqsMPHgWuPdfQY+SM5oI94mTc 1U5mEjkBXZSzavedEero+f+J+PnRulLmbA/NJoHAsNE= ) ; Key ID = 59630`
	DNSKEY=30870/SEP is now in the chain-of-trust
	DS=30870/SHA-1 verifies DNSKEY=30870/SEP
	DS=30870/SHA-256 verifies DNSKEY=30870/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200423215703 20200402215703 30870 medlineplus.gov. ffHNdj3frAWrS2rwDhoX4VKDzQU0zjCTMAEZInfRhrXHe0LyHdFQujghC/fS3UNUA+brHW4I0gvc VkKpa7TvnNPgdNsZKkBfRQIa2PjDigADk0qL3B6LrDahcEkfIs1pCVRIL+VmbjPgJdcQTkChHySK RQH69hxPUpnUmLIy52YXJcRSd8rSIRLVX+FEFJ6OiWSzTyVvRyisxZECUBJ2xq9sVtB+htRpcxeT QEOFEo+uMs6sl+c/x15nErSLDHIyycQ6wgltQ+nLcmXTxP6kANlBK+Ixwky+B2ohbEYTqzs8W8Fe I1LTNqnEjnsj3QqfW2CesYWQObMrb33+bakypw== )`
	`MEDLINEPLUS.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200423095704 20200402095704 59630 medlineplus.gov. oLeucU5nqV3YaUiCZhqtEf8RcfAOLHzstWUUniMA5RtGTyfioDw1u7g9CFgGaeDI4LRB/lkoD6cD 2Y50969Jo+6sm86RBrBrltcUMXDBpKp7IZVRvOc7SBod9e3ZfXmETwCVvp+DBgQbFUag/B7EPXyE +dl0sERGti6jNpaBBwa2ak6k6CMhEqZZMd2v+cuQwkQw7MqYok5xcSzEjQ6U65gg63894kih8IOe SuuRZpaNuz1JC6sE6lQPLGeDmquyVA9LDYNQwEWM/akiW9mAYoEI3ZIwNqJRcbnS/VkwL5OLAcwm oYXcHm6T3WNQnRFxd0JDpy1iQMDHvaS0qhIVdw== )`
	RRSIG=30870 and DNSKEY=30870/SEP verifies the DNSKEY RRset
	RRSIG=59630 and DNSKEY=59630 verifies the DNSKEY RRset
	DNSKEY=59630 is now in the chain-of-trust
	Query to gslb01.nlm.nih.GOV for MEDLINEPLUS.GOV/A
	Received 389 bytes from 130.14.252.50
	;; Answer received from 130.14.252.50 (389 bytes) ;; HEADER SECTION ;; id = 48716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MEDLINEPLUS.GOV. IN A ;; ANSWER SECTION (2 records) MEDLINEPLUS.GOV. 30 IN CNAME medlineplus.awsprod.nlm.nih.GOV. MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20200423102844 20200402102844 59630 medlineplus.gov. G46XCyn/n77jW5ZK6PzHV2oGqxjydh1E1tzOOnUXzGEcIr33mIv5o+UWKWgxzpj7OcsbRuNVsa9c JfmCOMwB7PJNk2ocnhzp7b28R88DmJeQzfARNwvqlL2e5wwR7fZTEDX++QKaZAObRJogvqossh8W /S2Nq0uywNwUuV3ucNfuobn0YuIFdguh1vkXAKwjv5i+/pvOYfttNn9RHUJuEacszX1ZFMYa1ED0 1keuFQpVPYCvK/6vpsdlLZuoO2ccX9JW/tidWBmI824iCj5EvFvUCvujFScfSAGiO5YJJ9lWEBTx 7CJQta3lf/lQsqRZBup29UqpCJMKBCPIFKAjDg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MEDLINEPLUS.GOV is authoritative for MEDLINEPLUS.GOV
	Found RRSIG signed by medlineplus.gov zone
	MEDLINEPLUS.GOV is a CNAME to medlineplus.awsprod.nlm.nih.GOV
	Found 1 RRSIGs over CNAME RRset
	`MEDLINEPLUS.GOV. 30 IN RRSIG ( CNAME 7 2 30 20200423102844 20200402102844 59630 medlineplus.gov. G46XCyn/n77jW5ZK6PzHV2oGqxjydh1E1tzOOnUXzGEcIr33mIv5o+UWKWgxzpj7OcsbRuNVsa9c JfmCOMwB7PJNk2ocnhzp7b28R88DmJeQzfARNwvqlL2e5wwR7fZTEDX++QKaZAObRJogvqossh8W /S2Nq0uywNwUuV3ucNfuobn0YuIFdguh1vkXAKwjv5i+/pvOYfttNn9RHUJuEacszX1ZFMYa1ED0 1keuFQpVPYCvK/6vpsdlLZuoO2ccX9JW/tidWBmI824iCj5EvFvUCvujFScfSAGiO5YJJ9lWEBTx 7CJQta3lf/lQsqRZBup29UqpCJMKBCPIFKAjDg== )`
	RRSIG=59630 and DNSKEY=59630 verifies the CNAME RRset

GOV

	Query to a.gov-servers.net for medlineplus.awsprod.nlm.nih.GOV/A
	Received 608 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (608 bytes) ;; HEADER SECTION ;; id = 39142 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nih.GOV. 86400 IN NS ns.nih.GOV. nih.GOV. 86400 IN NS ns3.nih.GOV. nih.GOV. 86400 IN NS ns2.nih.GOV. nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. ERIeN5TnaykEpVR5zqXwq6unXtQRtCSx38lOZM2yeQEn7FpSIt+80c7MHzOWDpz8zjKbxxChRDJS LoG8iuVkz1uzTkgZVFoxhJ98lMqI1/s78UiLpxQNHWIucPQqcfWpt8Afe64jXf3r0F/F+RuFBw5u xpm0YjA/4BICTnsLZhG20zTAKcgICawqX2+nmy+/qaS4j3npyuUB3Kg932OXrA== ) ;; ADDITIONAL SECTION (7 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for nih.GOV/DNSKEY
	Received 584 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (584 bytes) ;; HEADER SECTION ;; id = 19097 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nih.GOV. 86400 IN NS ns.nih.GOV. nih.GOV. 86400 IN NS ns3.nih.GOV. nih.GOV. 86400 IN NS ns2.nih.GOV. nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. ERIeN5TnaykEpVR5zqXwq6unXtQRtCSx38lOZM2yeQEn7FpSIt+80c7MHzOWDpz8zjKbxxChRDJS LoG8iuVkz1uzTkgZVFoxhJ98lMqI1/s78UiLpxQNHWIucPQqcfWpt8Afe64jXf3r0F/F+RuFBw5u xpm0YjA/4BICTnsLZhG20zTAKcgICawqX2+nmy+/qaS4j3npyuUB3Kg932OXrA== ) ;; ADDITIONAL SECTION (7 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nih.GOV

nih.GOV

	Checking DS between GOV and nih.GOV
	Query to d.gov-servers.net for nih.GOV/DS
	Received 399 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (399 bytes) ;; HEADER SECTION ;; id = 57062 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DS ;; ANSWER SECTION (5 records) nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. ERIeN5TnaykEpVR5zqXwq6unXtQRtCSx38lOZM2yeQEn7FpSIt+80c7MHzOWDpz8zjKbxxChRDJS LoG8iuVkz1uzTkgZVFoxhJ98lMqI1/s78UiLpxQNHWIucPQqcfWpt8Afe64jXf3r0F/F+RuFBw5u xpm0YjA/4BICTnsLZhG20zTAKcgICawqX2+nmy+/qaS4j3npyuUB3Kg932OXrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for nih.GOV in the GOV zone
	DS=35355/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=44025/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=35355/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=44025/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`nih.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. ERIeN5TnaykEpVR5zqXwq6unXtQRtCSx38lOZM2yeQEn7FpSIt+80c7MHzOWDpz8zjKbxxChRDJS LoG8iuVkz1uzTkgZVFoxhJ98lMqI1/s78UiLpxQNHWIucPQqcfWpt8Afe64jXf3r0F/F+RuFBw5u xpm0YjA/4BICTnsLZhG20zTAKcgICawqX2+nmy+/qaS4j3npyuUB3Kg932OXrA== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=35355/SHA-256 is now in the chain-of-trust
	DS=44025/SHA-1 is now in the chain-of-trust
	`nih.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 )`
	`nih.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c`
	`nih.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d`
	`nih.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 )`
	Query to ns2.nih.GOV for nih.GOV/DNSKEY
	Received 1493 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (1493 bytes) ;; HEADER SECTION ;; id = 51246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nih.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) nih.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAa8x+UfBLiU6eftb5fs9DweB717SQB7Sp2yj/aCvREjyfyqSI7iBTbUl8P1wq6j0WG3eRo2m O9mp6hNUf0JZGMe6BXE0akcHvAHo2p4zmss50Dn3IqqiKIM3k4cKFzyOSjLG+bNzJtz5WKdTA8AK oinkOWms1dIsckFwm/luJRDl ) ; Key ID = 9050 nih.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAcFsAJQcRWvmnxWgqWhqtCA8yi6k6fixeUOCOYOL8yEBg0lv33N6u5mqDcgj/1BdhjaYv+H0 e9Bjv95zxo+1qyjid2ADDtH47p3mFq0rUB115gFTWADvPnBmTeEl0cqIUcFjkSFONy5JvAamiJmf HrqwkDME9UNn4jMUipeFCYgSEslXWZZLmfUwdow7SDFa/hNG+eUMfXDiM5HAd6hsF6SAF66CjppK AQarGtuhkVPYSQj/hQzhVNhwpZN7LEdcUsqQh0R8QfhD2UXnhAwDerFrIjhUZHhfQueYQs3avDee GdTE/sQ/afzutrqKfNNFAyxTBlwRhvbooOizhQOI7jE= ) ; Key ID = 35355 nih.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAdVZ6+yIoalYKo4CsDMgKrZxztZ1XbcsFPUzx41quE7fwOabxzNpcKU1D+V9pjKCTVM778RH /bMUym7hzG1rLXDjVRFU9ks8RazqMMu5RAVt1BJI9gSxRfSra+UauUUq/37qQnmCnECKCtOCi1ne NB43Hdte/MEhmBXf1SicEizuLrA3SWzkGdUoq4ZvdxybcgkeCy4aAZw24mh0YOdxzcwHxOf5BEZS cLzH+IFkfOpQ9p168ndzR2G7Su4Pxl4OrHrnvP4XhEWzl0yIdYjLIUb0NGK5K2reMo3JcaiGIuAL Nc8XXdLlblHoLjVMu9kxsSBFcWeked//Ct0558igkAs= ) ; Key ID = 44025 nih.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200412193618 20200408183844 9050 nih.gov. JEhQmSM9iARQw8QdlK/6kNrc+AqovLI/2zuyibTeRmthPxEVtp7IgpG/h9xIVcQ+RA4pNQipFT1Z 6dUP++3p+i2yrKq0gnyY800JNkLjSnxGIJMWQG3VCck+LMRIWBAFOxsYEruiBBfEsbmeWBPlFdxt DnFZZCl++xdf65UKvIU= ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200412193618 20200408183844 35355 nih.gov. NOIKPkeqVtKDnyJgu7Dvn5conlcupKqbndXCqGbQ3ZtnDeIW45fbzvbMDrbm2VJW0P98P9Hdql/a KCaxPvJvTqH4XVMYkU2T5eSEXHtv1jcET8PrTJh58eSNB1vn7X93m+Aqgo3gDrVWt5wmqSOn6i+Z XZUTOowgh1rn+FJHeIhvOVeB4hkVr7CKql7fpXyYo4/Y7UoKvJV+Z0M+aEmlbSzg+2lIk39NI3DA e+kcUV1021fbB++xrZ95PrhbTjT3RmbYLFfej9SqtvRYtmPyfB7t7anp5juAlkOPJw9677+K9DBP j3GK4+Xcin0+PhQal2QwrAa4xYJLoZxFc7Ugqg== ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200412193618 20200408183844 44025 nih.gov. xXhxpFq0ohKPq5lYvUsejMC/05dn/tai/5izEk0KyJsUp8p1dIkYyPX22bqpt4NzJLA1Q8sIYupW Z8cM7E/lrH7eIPis97aXw18LuAmmNk2BQaG6X/aqrZ/SK+E7/cv2X+sgudu6LWIFoxtvqY2h69nZ A+ERaRcBT8FYYlFYjqufYbTV3Es8Z7spAFetR9HZOMS+T39iS0HtPtRPDZAKOhvnOoNGDr5DDsk0 PA9yqzIFloXwDTF1qDux83YEdztOuc9zAexAWxTSGXIEddMbZSMIc89+1ulbmiVfYNrxgvuPOc6Q vkaqDjl0hpIg+xRJU16Fo61iDJmnw3qKCftuAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for nih.GOV
	`nih.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAa8x+UfBLiU6eftb5fs9DweB717SQB7Sp2yj/aCvREjyfyqSI7iBTbUl8P1wq6j0WG3eRo2m O9mp6hNUf0JZGMe6BXE0akcHvAHo2p4zmss50Dn3IqqiKIM3k4cKFzyOSjLG+bNzJtz5WKdTA8AK oinkOWms1dIsckFwm/luJRDl ) ; Key ID = 9050`
	`nih.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAcFsAJQcRWvmnxWgqWhqtCA8yi6k6fixeUOCOYOL8yEBg0lv33N6u5mqDcgj/1BdhjaYv+H0 e9Bjv95zxo+1qyjid2ADDtH47p3mFq0rUB115gFTWADvPnBmTeEl0cqIUcFjkSFONy5JvAamiJmf HrqwkDME9UNn4jMUipeFCYgSEslXWZZLmfUwdow7SDFa/hNG+eUMfXDiM5HAd6hsF6SAF66CjppK AQarGtuhkVPYSQj/hQzhVNhwpZN7LEdcUsqQh0R8QfhD2UXnhAwDerFrIjhUZHhfQueYQs3avDee GdTE/sQ/afzutrqKfNNFAyxTBlwRhvbooOizhQOI7jE= ) ; Key ID = 35355`
	`nih.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAdVZ6+yIoalYKo4CsDMgKrZxztZ1XbcsFPUzx41quE7fwOabxzNpcKU1D+V9pjKCTVM778RH /bMUym7hzG1rLXDjVRFU9ks8RazqMMu5RAVt1BJI9gSxRfSra+UauUUq/37qQnmCnECKCtOCi1ne NB43Hdte/MEhmBXf1SicEizuLrA3SWzkGdUoq4ZvdxybcgkeCy4aAZw24mh0YOdxzcwHxOf5BEZS cLzH+IFkfOpQ9p168ndzR2G7Su4Pxl4OrHrnvP4XhEWzl0yIdYjLIUb0NGK5K2reMo3JcaiGIuAL Nc8XXdLlblHoLjVMu9kxsSBFcWeked//Ct0558igkAs= ) ; Key ID = 44025`
	DNSKEY=35355/SEP is now in the chain-of-trust
	DS=35355/SHA-256 verifies DNSKEY=35355/SEP
	DS=35355/SHA-1 verifies DNSKEY=35355/SEP
	DNSKEY=44025/SEP is now in the chain-of-trust
	DS=44025/SHA-1 verifies DNSKEY=44025/SEP
	DS=44025/SHA-256 verifies DNSKEY=44025/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`nih.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200412193618 20200408183844 9050 nih.gov. JEhQmSM9iARQw8QdlK/6kNrc+AqovLI/2zuyibTeRmthPxEVtp7IgpG/h9xIVcQ+RA4pNQipFT1Z 6dUP++3p+i2yrKq0gnyY800JNkLjSnxGIJMWQG3VCck+LMRIWBAFOxsYEruiBBfEsbmeWBPlFdxt DnFZZCl++xdf65UKvIU= )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200412193618 20200408183844 35355 nih.gov. NOIKPkeqVtKDnyJgu7Dvn5conlcupKqbndXCqGbQ3ZtnDeIW45fbzvbMDrbm2VJW0P98P9Hdql/a KCaxPvJvTqH4XVMYkU2T5eSEXHtv1jcET8PrTJh58eSNB1vn7X93m+Aqgo3gDrVWt5wmqSOn6i+Z XZUTOowgh1rn+FJHeIhvOVeB4hkVr7CKql7fpXyYo4/Y7UoKvJV+Z0M+aEmlbSzg+2lIk39NI3DA e+kcUV1021fbB++xrZ95PrhbTjT3RmbYLFfej9SqtvRYtmPyfB7t7anp5juAlkOPJw9677+K9DBP j3GK4+Xcin0+PhQal2QwrAa4xYJLoZxFc7Ugqg== )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200412193618 20200408183844 44025 nih.gov. xXhxpFq0ohKPq5lYvUsejMC/05dn/tai/5izEk0KyJsUp8p1dIkYyPX22bqpt4NzJLA1Q8sIYupW Z8cM7E/lrH7eIPis97aXw18LuAmmNk2BQaG6X/aqrZ/SK+E7/cv2X+sgudu6LWIFoxtvqY2h69nZ A+ERaRcBT8FYYlFYjqufYbTV3Es8Z7spAFetR9HZOMS+T39iS0HtPtRPDZAKOhvnOoNGDr5DDsk0 PA9yqzIFloXwDTF1qDux83YEdztOuc9zAexAWxTSGXIEddMbZSMIc89+1ulbmiVfYNrxgvuPOc6Q vkaqDjl0hpIg+xRJU16Fo61iDJmnw3qKCftuAg== )`
	RRSIG=9050 and DNSKEY=9050 verifies the DNSKEY RRset
	RRSIG=35355 and DNSKEY=35355/SEP verifies the DNSKEY RRset
	RRSIG=44025 and DNSKEY=44025/SEP verifies the DNSKEY RRset
	DNSKEY=9050 is now in the chain-of-trust
	Query to ns3.nih.GOV for medlineplus.awsprod.nlm.nih.GOV/A
	Received 445 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (445 bytes) ;; HEADER SECTION ;; id = 29800 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.GOV. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.GOV. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 86400 IN NS ns-1890.awsdns-44.co.uk. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN NSEC3 ( 1 0 10 - a4gq1l7oecs4at2tbbv4ssar4h896bfd NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN RRSIG ( NSEC3 7 4 3600 20200411111143 20200312103016 33039 nlm.nih.gov. Tb2rM8GUARQgVK+ep1hu+FgruQTf6xUaTO9poZTMOhQnmo2nY5ozEN01y71F6gG/yaoufrdRc6BP MSd+RlHj8cZTEp+ri0hYPASZbH7yowbkq5G7PNfwPNdhyhgHzsoiRldmRGjyYZ/+PLZSrp2si4GI wvKFPkiDafZhdhkaj9I= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nih.GOV for nlm.nih.GOV/DNSKEY
	Received 1082 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (1082 bytes) ;; HEADER SECTION ;; id = 25588 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbarZcIhZh+HJYCw6YxUTmUPnJhRKVw5NNqU8oNeeWMpE8ZRikL72oOxjsQnHAhYngkoA9kF 1psLBZkTkaP1McdmcHdhNsQjR6p8vaaKsBYIbRnEbe66d8qzl3ShXObyScJMyvG0p5HtybTLGUvW R9WxbWDsSNcslCqtjCHAwHyF ) ; Key ID = 33039 nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAa8Lex1b++z5BasDRp+kOVLIPtMPshP9jFi6+LzheuBxg2JfkEfYp9OHYzX0laYtt+2RgKyU FtDZzywOnCxvU6gcUvpDeahsHLIJ3GHJ8zgooYT/XHsdLVqAghOujgD2sgWRD/wU8lfV0upqMxqC xRKH0xpAuKa0gamoCL7CYOsX ) ; Key ID = 15369 nlm.nih.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbukPSEDHxMAwAeNYoEeSKLsT4QMflPpgT1wS9GYNdyu2cRJb0IO1PAG8fYEpPSaLEkeGxbQ PIipfHVZZpOBI7/I1ySB92aqJxfh+d8e8OopcMyX19g5E/2zZDQvWQfX9U9iHtNOqATo8cYG612D oKtb1QIZiPcUj9StUtF5u+4FENZaZowOwYQ/pcsApQy/Jj8t4vBQbFM4S9EA5Brop+3iCngd9fjA o09CbWr8MkzhUOsroB6ocMAUtYR3WaHeLrf1GxBH2I/GA+AtDzmWhfa4OtEo/ADa8KdiMR7Iwge+ W9W73zjHdxTsWdpMuG3UT7QKhIdc0mnXtjV750RixMM= ) ; Key ID = 43224 nlm.nih.GOV. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200501113013 20200401103013 33039 nlm.nih.gov. XOXvyjSUd9HQNHBOWCFXPPY/n3MGlmVbCgxJZOfqne2RCPM6ZL7oWfEMC240HeFmIYvWUcooE6Ip hbUVmyXn+xxuQU9iJ7qnjCi8knDp7sFHb4MKUAbXgCjt5P5xpRHtvV5yZlDTn/R9kzwUs8k+Sqhc NuiB5DR+Ss8TVExQc3g= ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200501113013 20200401103013 43224 nlm.nih.gov. bw9iIYna5MzJQEmzwgBWhizj6qiQpIbK66N8F2YirSb1NRdVOR3q9ILQBW7vIwlVM5N3oYMOb9+A H38Gtf8w4thXtB9CIv2Sfz/tf4wtCEfVA2IJZh4XfAHSnhma+1dylDeT3UcKjBfl4q+9bDuNug2d p82J0/zoMYMs9MImfKGtolzjWonAP0Jt5iekKDqAsoS7X7vdJuVKATXY+qhKJsyRGEppzzY9pIi5 Mi/um+G9FaB8BYPgU2hDtn2WKH8vHTSC7ptMydYB6yuRKNSgIQ/w/YPduI82LqW08W+JLgveCI3M 72BVqTV4u3ILK9Hh8iYuxTNxJJ+tz/PAsBvNSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nlm.nih.GOV
	Attempting to learn nameservers for nlm.nih.GOV
	Query to ns2.nih.GOV for nlm.nih.GOV/NS
	Received 306 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (306 bytes) ;; HEADER SECTION ;; id = 17953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN NS ;; ANSWER SECTION (6 records) nlm.nih.GOV. 3600 IN NS ns2.nih.GOV. nlm.nih.GOV. 3600 IN NS ns3.nih.GOV. nlm.nih.GOV. 3600 IN NS ns.nih.GOV. nlm.nih.GOV. 3600 IN NS lhcns2.nlm.nih.GOV. nlm.nih.GOV. 3600 IN NS lhcns1.nlm.nih.GOV. nlm.nih.GOV. 3600 IN RRSIG ( NS 7 3 3600 20200411105451 20200312103020 33039 nlm.nih.gov. ICafDHG4LdHzCLcsjDHWzMXPj3TxakTdV0qDDfHIlKJDDFSogQTisNXZR+X9MnKLVVYo5UDBtIT7 JbU5VCnlEpPxdfmRlWCa2qvdJUWGswMDJqgTz6pTHCUJuRwKioyhUTyyTTYHuzwK9K6pK66PCUh1 Gjxv0a8df71YQq2cULE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found nlm.nih.GOV nameservers: ns2.nih.GOV, ns3.nih.GOV, ns.nih.GOV, lhcns2.nlm.nih.GOV, lhcns1.nlm.nih.GOV

nlm.nih.GOV

	Checking DS between nih.GOV and nlm.nih.GOV
	Query to ns.nih.GOV for nlm.nih.GOV/DS
	Received 303 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (303 bytes) ;; HEADER SECTION ;; id = 44020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DS ;; ANSWER SECTION (3 records) nlm.nih.GOV. 7200 IN DS ( 43224 7 2 862ca6cc23d78edfe7a5c846328bc0521627f48ac06a601df8d462251969b28a ) nlm.nih.GOV. 7200 IN DS ( 14674 7 2 fd00329146ac9c30acaab5edfa9f8b56b548b6e3dd66a11d2505ecb471807d80 ) nlm.nih.GOV. 7200 IN RRSIG ( DS 7 3 7200 20200413060129 20200409051501 9050 nih.gov. NjuIEVc/0f4C1+8NdWlIY7ZbpKdKxwersNRFmKVXde57escdTuMQv1N5CaQD+kbvjmMKwj1rKQ03 tDJ8OJ75bjBn5vWWYQtvMLV1tiYnevoC0TvgwKER/Xcop2UsPdoDg98osFwNgTJyoz7BL5SiYpf6 vWb80wsHM5FEz4a3Y00= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for nlm.nih.GOV in the nih.GOV zone
	DS=43224/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=14674/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`nlm.nih.GOV. 7200 IN RRSIG ( DS 7 3 7200 20200413060129 20200409051501 9050 nih.gov. NjuIEVc/0f4C1+8NdWlIY7ZbpKdKxwersNRFmKVXde57escdTuMQv1N5CaQD+kbvjmMKwj1rKQ03 tDJ8OJ75bjBn5vWWYQtvMLV1tiYnevoC0TvgwKER/Xcop2UsPdoDg98osFwNgTJyoz7BL5SiYpf6 vWb80wsHM5FEz4a3Y00= )`
	RRSIG=9050 and DNSKEY=9050 verifies the DS RRset
	DS=43224/SHA-256 is now in the chain-of-trust
	DS=14674/SHA-256 is now in the chain-of-trust
	`nlm.nih.GOV. 7200 IN DS ( 43224 7 2 862ca6cc23d78edfe7a5c846328bc0521627f48ac06a601df8d462251969b28a )`
	`nlm.nih.GOV. 7200 IN DS ( 14674 7 2 fd00329146ac9c30acaab5edfa9f8b56b548b6e3dd66a11d2505ecb471807d80 )`
	Query to ns.nih.GOV for nlm.nih.GOV/DNSKEY
	Received 1082 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (1082 bytes) ;; HEADER SECTION ;; id = 8443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbarZcIhZh+HJYCw6YxUTmUPnJhRKVw5NNqU8oNeeWMpE8ZRikL72oOxjsQnHAhYngkoA9kF 1psLBZkTkaP1McdmcHdhNsQjR6p8vaaKsBYIbRnEbe66d8qzl3ShXObyScJMyvG0p5HtybTLGUvW R9WxbWDsSNcslCqtjCHAwHyF ) ; Key ID = 33039 nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAa8Lex1b++z5BasDRp+kOVLIPtMPshP9jFi6+LzheuBxg2JfkEfYp9OHYzX0laYtt+2RgKyU FtDZzywOnCxvU6gcUvpDeahsHLIJ3GHJ8zgooYT/XHsdLVqAghOujgD2sgWRD/wU8lfV0upqMxqC xRKH0xpAuKa0gamoCL7CYOsX ) ; Key ID = 15369 nlm.nih.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbukPSEDHxMAwAeNYoEeSKLsT4QMflPpgT1wS9GYNdyu2cRJb0IO1PAG8fYEpPSaLEkeGxbQ PIipfHVZZpOBI7/I1ySB92aqJxfh+d8e8OopcMyX19g5E/2zZDQvWQfX9U9iHtNOqATo8cYG612D oKtb1QIZiPcUj9StUtF5u+4FENZaZowOwYQ/pcsApQy/Jj8t4vBQbFM4S9EA5Brop+3iCngd9fjA o09CbWr8MkzhUOsroB6ocMAUtYR3WaHeLrf1GxBH2I/GA+AtDzmWhfa4OtEo/ADa8KdiMR7Iwge+ W9W73zjHdxTsWdpMuG3UT7QKhIdc0mnXtjV750RixMM= ) ; Key ID = 43224 nlm.nih.GOV. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200501113013 20200401103013 33039 nlm.nih.gov. XOXvyjSUd9HQNHBOWCFXPPY/n3MGlmVbCgxJZOfqne2RCPM6ZL7oWfEMC240HeFmIYvWUcooE6Ip hbUVmyXn+xxuQU9iJ7qnjCi8knDp7sFHb4MKUAbXgCjt5P5xpRHtvV5yZlDTn/R9kzwUs8k+Sqhc NuiB5DR+Ss8TVExQc3g= ) nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200501113013 20200401103013 43224 nlm.nih.gov. bw9iIYna5MzJQEmzwgBWhizj6qiQpIbK66N8F2YirSb1NRdVOR3q9ILQBW7vIwlVM5N3oYMOb9+A H38Gtf8w4thXtB9CIv2Sfz/tf4wtCEfVA2IJZh4XfAHSnhma+1dylDeT3UcKjBfl4q+9bDuNug2d p82J0/zoMYMs9MImfKGtolzjWonAP0Jt5iekKDqAsoS7X7vdJuVKATXY+qhKJsyRGEppzzY9pIi5 Mi/um+G9FaB8BYPgU2hDtn2WKH8vHTSC7ptMydYB6yuRKNSgIQ/w/YPduI82LqW08W+JLgveCI3M 72BVqTV4u3ILK9Hh8iYuxTNxJJ+tz/PAsBvNSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for nlm.nih.GOV
	`nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbarZcIhZh+HJYCw6YxUTmUPnJhRKVw5NNqU8oNeeWMpE8ZRikL72oOxjsQnHAhYngkoA9kF 1psLBZkTkaP1McdmcHdhNsQjR6p8vaaKsBYIbRnEbe66d8qzl3ShXObyScJMyvG0p5HtybTLGUvW R9WxbWDsSNcslCqtjCHAwHyF ) ; Key ID = 33039`
	`nlm.nih.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAa8Lex1b++z5BasDRp+kOVLIPtMPshP9jFi6+LzheuBxg2JfkEfYp9OHYzX0laYtt+2RgKyU FtDZzywOnCxvU6gcUvpDeahsHLIJ3GHJ8zgooYT/XHsdLVqAghOujgD2sgWRD/wU8lfV0upqMxqC xRKH0xpAuKa0gamoCL7CYOsX ) ; Key ID = 15369`
	`nlm.nih.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbukPSEDHxMAwAeNYoEeSKLsT4QMflPpgT1wS9GYNdyu2cRJb0IO1PAG8fYEpPSaLEkeGxbQ PIipfHVZZpOBI7/I1ySB92aqJxfh+d8e8OopcMyX19g5E/2zZDQvWQfX9U9iHtNOqATo8cYG612D oKtb1QIZiPcUj9StUtF5u+4FENZaZowOwYQ/pcsApQy/Jj8t4vBQbFM4S9EA5Brop+3iCngd9fjA o09CbWr8MkzhUOsroB6ocMAUtYR3WaHeLrf1GxBH2I/GA+AtDzmWhfa4OtEo/ADa8KdiMR7Iwge+ W9W73zjHdxTsWdpMuG3UT7QKhIdc0mnXtjV750RixMM= ) ; Key ID = 43224`
	DNSKEY=43224/SEP is now in the chain-of-trust
	DS=43224/SHA-256 verifies DNSKEY=43224/SEP
	DS=14674/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`nlm.nih.GOV. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200501113013 20200401103013 33039 nlm.nih.gov. XOXvyjSUd9HQNHBOWCFXPPY/n3MGlmVbCgxJZOfqne2RCPM6ZL7oWfEMC240HeFmIYvWUcooE6Ip hbUVmyXn+xxuQU9iJ7qnjCi8knDp7sFHb4MKUAbXgCjt5P5xpRHtvV5yZlDTn/R9kzwUs8k+Sqhc NuiB5DR+Ss8TVExQc3g= )`
	`nlm.nih.gov. 3600 IN RRSIG ( DNSKEY 7 3 3600 20200501113013 20200401103013 43224 nlm.nih.gov. bw9iIYna5MzJQEmzwgBWhizj6qiQpIbK66N8F2YirSb1NRdVOR3q9ILQBW7vIwlVM5N3oYMOb9+A H38Gtf8w4thXtB9CIv2Sfz/tf4wtCEfVA2IJZh4XfAHSnhma+1dylDeT3UcKjBfl4q+9bDuNug2d p82J0/zoMYMs9MImfKGtolzjWonAP0Jt5iekKDqAsoS7X7vdJuVKATXY+qhKJsyRGEppzzY9pIi5 Mi/um+G9FaB8BYPgU2hDtn2WKH8vHTSC7ptMydYB6yuRKNSgIQ/w/YPduI82LqW08W+JLgveCI3M 72BVqTV4u3ILK9Hh8iYuxTNxJJ+tz/PAsBvNSw== )`
	RRSIG=33039 and DNSKEY=33039 verifies the DNSKEY RRset
	RRSIG=43224 and DNSKEY=43224/SEP verifies the DNSKEY RRset
	DNSKEY=33039 is now in the chain-of-trust
	DNSKEY=15369 is now in the chain-of-trust
	Query to ns2.nih.GOV for medlineplus.awsprod.nlm.nih.GOV/A
	Received 445 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (445 bytes) ;; HEADER SECTION ;; id = 39172 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.GOV. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 86400 IN NS ns-584.awsdns-09.net. awsprod.nlm.nih.GOV. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 86400 IN NS ns-1890.awsdns-44.co.uk. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN NSEC3 ( 1 0 10 - a4gq1l7oecs4at2tbbv4ssar4h896bfd NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN RRSIG ( NSEC3 7 4 3600 20200411111143 20200312103016 33039 nlm.nih.gov. Tb2rM8GUARQgVK+ep1hu+FgruQTf6xUaTO9poZTMOhQnmo2nY5ozEN01y71F6gG/yaoufrdRc6BP MSd+RlHj8cZTEp+ri0hYPASZbH7yowbkq5G7PNfwPNdhyhgHzsoiRldmRGjyYZ/+PLZSrp2si4GI wvKFPkiDafZhdhkaj9I= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.nih.GOV for awsprod.nlm.nih.GOV/DNSKEY
	Received 433 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (433 bytes) ;; HEADER SECTION ;; id = 46679 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) awsprod.nlm.nih.GOV. 86400 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 86400 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 86400 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 86400 IN NS ns-584.awsdns-09.net. A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN NSEC3 ( 1 0 10 - a4gq1l7oecs4at2tbbv4ssar4h896bfd NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.GOV. 3600 IN RRSIG ( NSEC3 7 4 3600 20200411111143 20200312103016 33039 nlm.nih.gov. Tb2rM8GUARQgVK+ep1hu+FgruQTf6xUaTO9poZTMOhQnmo2nY5ozEN01y71F6gG/yaoufrdRc6BP MSd+RlHj8cZTEp+ri0hYPASZbH7yowbkq5G7PNfwPNdhyhgHzsoiRldmRGjyYZ/+PLZSrp2si4GI wvKFPkiDafZhdhkaj9I= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone awsprod.nlm.nih.GOV

awsprod.nlm.nih.GOV

	Checking DS between nlm.nih.GOV and awsprod.nlm.nih.GOV
	Query to ns3.nih.GOV for awsprod.nlm.nih.GOV/DS
	Received 529 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (529 bytes) ;; HEADER SECTION ;; id = 63597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlm.nih.GOV. 3600 IN SOA ( lhcns1.nlm.nih.GOV. nlmdnshostmaster.mail.nih.GOV. 600590172 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nlm.nih.GOV. 3600 IN RRSIG ( SOA 7 3 3600 20200506142912 20200406132912 33039 nlm.nih.gov. tRSuMFMY7zOTbgS2o200hUu8ZARKurVjoTX9J3Up4JZthfitTG0lqx92teYdxgmEb11gVn/xHz/c Uhx4a8nc6234HH/1QIwpLHbCvc3AnECpHIZajIjLdfGRrsJX/yZ8chlX60BU/LCTMGF2iHvXddnN lhy61JJ3fK3gO+0yXHE= ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN NSEC3 ( 1 0 10 - a4gq1l7oecs4at2tbbv4ssar4h896bfd NS ) A40GMKRIO6OCSBSMIA70C547O9SBQ4PC.nlm.nih.gov. 3600 IN RRSIG ( NSEC3 7 4 3600 20200411111143 20200312103016 33039 nlm.nih.gov. Tb2rM8GUARQgVK+ep1hu+FgruQTf6xUaTO9poZTMOhQnmo2nY5ozEN01y71F6gG/yaoufrdRc6BP MSd+RlHj8cZTEp+ri0hYPASZbH7yowbkq5G7PNfwPNdhyhgHzsoiRldmRGjyYZ/+PLZSrp2si4GI wvKFPkiDafZhdhkaj9I= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for awsprod.nlm.nih.GOV in the nlm.nih.GOV zone
	Query to ns-226.awsdns-28.com for awsprod.nlm.nih.GOV/DNSKEY
	Received 135 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (135 bytes) ;; HEADER SECTION ;; id = 36167 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.GOV/A
	Received 264 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (264 bytes) ;; HEADER SECTION ;; id = 56495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.224.215.64 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.224.215.92 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.224.215.33 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.224.215.50 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	awsprod.nlm.nih.GOV is authoritative for medlineplus.awsprod.nlm.nih.GOV
	Query to ns-1125.awsdns-12.org for medlineplus.awsprod.nlm.nih.GOV/DNSKEY
	Received 147 bytes from 205.251.196.101
	;; Answer received from 205.251.196.101 (147 bytes) ;; HEADER SECTION ;; id = 11171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1890.awsdns-44.co.uk for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.199.98
	;; Answer received from 205.251.199.98 (249 bytes) ;; HEADER SECTION ;; id = 9575 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-584.awsdns-09.net for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.194.72
	;; Answer received from 205.251.194.72 (249 bytes) ;; HEADER SECTION ;; id = 14687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-226.awsdns-28.com for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (249 bytes) ;; HEADER SECTION ;; id = 29846 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1125.awsdns-12.org for awsprod.nlm.nih.GOV/SOA
	Received 249 bytes from 205.251.196.101
	;; Answer received from 205.251.196.101 (249 bytes) ;; HEADER SECTION ;; id = 8279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; awsprod.nlm.nih.GOV. IN SOA ;; ANSWER SECTION (1 record) awsprod.nlm.nih.GOV. 60 IN SOA ( ns-1890.awsdns-44.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-226.awsdns-28.com for medlineplus.awsprod.nlm.nih.GOV/A
	Received 264 bytes from 205.251.192.226
	;; Answer received from 205.251.192.226 (264 bytes) ;; HEADER SECTION ;; id = 65084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; medlineplus.awsprod.nlm.nih.GOV. IN A ;; ANSWER SECTION (4 records) medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.224.215.64 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.224.215.92 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.224.215.50 medlineplus.awsprod.nlm.nih.GOV. 60 IN A 13.224.215.33 ;; AUTHORITY SECTION (4 records) awsprod.nlm.nih.GOV. 172800 IN NS ns-1125.awsdns-12.org. awsprod.nlm.nih.GOV. 172800 IN NS ns-1890.awsdns-44.co.uk. awsprod.nlm.nih.GOV. 172800 IN NS ns-226.awsdns-28.com. awsprod.nlm.nih.GOV. 172800 IN NS ns-584.awsdns-09.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	medlineplus.awsprod.nlm.nih.GOV A RR has value 13.224.215.64
	medlineplus.awsprod.nlm.nih.GOV A RR has value 13.224.215.92
	medlineplus.awsprod.nlm.nih.GOV A RR has value 13.224.215.50
	medlineplus.awsprod.nlm.nih.GOV A RR has value 13.224.215.33
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MEDLINEPLUS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: