DNSSEC Analyzer - MESH.GOV

Domain Name:

Time: 2021-01-17 08:55:44 UTC, NTP stratum 4

Analyzing DNSSEC problems for MESH.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (864 bytes) ;; HEADER SECTION ;; id = 2600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to m.root-servers.net for MESH.GOV/A
	Received 666 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (666 bytes) ;; HEADER SECTION ;; id = 39419 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20210130050000 20210117040000 42351 . Uqx31Wf45Vvi7NyeZMW6zqcAcDZMD6wpnF+EdNxqrb0l/bvTnP2z75eIA5PWkd5Tduq1DTzNZhaB 8TxWdY6LC74o1e6M7sq+pJpg47Mn7JQBgay1+7jpRqd5nHo9StkB7Nexyxe6UZduuJaTkiXJ5Ubd 7Dqime2PlXCkEB5IV1LbhsMhI8eaQqpVE0VCx+xcS5syHMByLrzux6qKRM5W/lOPMYkwK6qqF2Sl GtPH7/6161eHPLefAhgXXfm/vhif4rEWx+q+JeVH6Ra7ajLuJ/s4s/4sDUHQY2MD56qASRAHOLa9 hQ4ehHLJ+aOT0W07CdFrLSGeTWxZF0jg0lVTCA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (658 bytes) ;; HEADER SECTION ;; id = 11445 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210130050000 20210117040000 42351 . Uqx31Wf45Vvi7NyeZMW6zqcAcDZMD6wpnF+EdNxqrb0l/bvTnP2z75eIA5PWkd5Tduq1DTzNZhaB 8TxWdY6LC74o1e6M7sq+pJpg47Mn7JQBgay1+7jpRqd5nHo9StkB7Nexyxe6UZduuJaTkiXJ5Ubd 7Dqime2PlXCkEB5IV1LbhsMhI8eaQqpVE0VCx+xcS5syHMByLrzux6qKRM5W/lOPMYkwK6qqF2Sl GtPH7/6161eHPLefAhgXXfm/vhif4rEWx+q+JeVH6Ra7ajLuJ/s4s/4sDUHQY2MD56qASRAHOLa9 hQ4ehHLJ+aOT0W07CdFrLSGeTWxZF0jg0lVTCA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 36663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210130050000 20210117040000 42351 . Uqx31Wf45Vvi7NyeZMW6zqcAcDZMD6wpnF+EdNxqrb0l/bvTnP2z75eIA5PWkd5Tduq1DTzNZhaB 8TxWdY6LC74o1e6M7sq+pJpg47Mn7JQBgay1+7jpRqd5nHo9StkB7Nexyxe6UZduuJaTkiXJ5Ubd 7Dqime2PlXCkEB5IV1LbhsMhI8eaQqpVE0VCx+xcS5syHMByLrzux6qKRM5W/lOPMYkwK6qqF2Sl GtPH7/6161eHPLefAhgXXfm/vhif4rEWx+q+JeVH6Ra7ajLuJ/s4s/4sDUHQY2MD56qASRAHOLa9 hQ4ehHLJ+aOT0W07CdFrLSGeTWxZF0jg0lVTCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210130050000 20210117040000 42351 . Uqx31Wf45Vvi7NyeZMW6zqcAcDZMD6wpnF+EdNxqrb0l/bvTnP2z75eIA5PWkd5Tduq1DTzNZhaB 8TxWdY6LC74o1e6M7sq+pJpg47Mn7JQBgay1+7jpRqd5nHo9StkB7Nexyxe6UZduuJaTkiXJ5Ubd 7Dqime2PlXCkEB5IV1LbhsMhI8eaQqpVE0VCx+xcS5syHMByLrzux6qKRM5W/lOPMYkwK6qqF2Sl GtPH7/6161eHPLefAhgXXfm/vhif4rEWx+q+JeVH6Ra7ajLuJ/s4s/4sDUHQY2MD56qASRAHOLa9 hQ4ehHLJ+aOT0W07CdFrLSGeTWxZF0jg0lVTCA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (957 bytes) ;; HEADER SECTION ;; id = 47592 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=15489 is now in the chain-of-trust
	Query to c.gov-servers.net for MESH.GOV/A
	Received 435 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (435 bytes) ;; HEADER SECTION ;; id = 13364 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) MESH.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MESH.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MESH.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MESH.GOV. 3600 IN DS ( 24081 7 2 a74326c13fa3b95865f3b09f5a5e40b41b4169494546ad41dde56c3ced7e2252 ) MESH.GOV. 3600 IN DS 24081 7 1 534a85d7375550f141260e928bd9089b18b77508 MESH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210124071008 20210117071008 27306 gov. aTu8qtMo5ahqfOvwWBN5krBUG/xX6KOrcE9R8o3D0G3cMTTvWEacXIHeSwPzgOBd4PKtte8P9c9D 3f+OkFRX7eg3ZdncQEWKDCBJVwK0TIFRFgr3fjjNRJPCBw5XQ7vbCqTD7XES0dwzLYOA30cLEhK6 jgS/km1f2c+ZpLDxOjggSz54IxbzQEoweaFViwm5SkSqpjxIgrmXbzwtVW6C9A== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for MESH.GOV/DNSKEY
	Received 435 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (435 bytes) ;; HEADER SECTION ;; id = 20690 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) MESH.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MESH.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MESH.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MESH.GOV. 3600 IN DS ( 24081 7 2 a74326c13fa3b95865f3b09f5a5e40b41b4169494546ad41dde56c3ced7e2252 ) MESH.GOV. 3600 IN DS 24081 7 1 534a85d7375550f141260e928bd9089b18b77508 MESH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210124071008 20210117071008 27306 gov. aTu8qtMo5ahqfOvwWBN5krBUG/xX6KOrcE9R8o3D0G3cMTTvWEacXIHeSwPzgOBd4PKtte8P9c9D 3f+OkFRX7eg3ZdncQEWKDCBJVwK0TIFRFgr3fjjNRJPCBw5XQ7vbCqTD7XES0dwzLYOA30cLEhK6 jgS/km1f2c+ZpLDxOjggSz54IxbzQEoweaFViwm5SkSqpjxIgrmXbzwtVW6C9A== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MESH.GOV

MESH.GOV

	Checking DS between GOV and MESH.GOV
	Query to c.gov-servers.net for MESH.GOV/DS
	Received 316 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (316 bytes) ;; HEADER SECTION ;; id = 33449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN DS ;; ANSWER SECTION (3 records) MESH.GOV. 3600 IN DS ( 24081 7 2 a74326c13fa3b95865f3b09f5a5e40b41b4169494546ad41dde56c3ced7e2252 ) MESH.GOV. 3600 IN DS 24081 7 1 534a85d7375550f141260e928bd9089b18b77508 MESH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210124071008 20210117071008 27306 gov. aTu8qtMo5ahqfOvwWBN5krBUG/xX6KOrcE9R8o3D0G3cMTTvWEacXIHeSwPzgOBd4PKtte8P9c9D 3f+OkFRX7eg3ZdncQEWKDCBJVwK0TIFRFgr3fjjNRJPCBw5XQ7vbCqTD7XES0dwzLYOA30cLEhK6 jgS/km1f2c+ZpLDxOjggSz54IxbzQEoweaFViwm5SkSqpjxIgrmXbzwtVW6C9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for MESH.GOV in the GOV zone
	DS=24081/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=24081/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`MESH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210124071008 20210117071008 27306 gov. aTu8qtMo5ahqfOvwWBN5krBUG/xX6KOrcE9R8o3D0G3cMTTvWEacXIHeSwPzgOBd4PKtte8P9c9D 3f+OkFRX7eg3ZdncQEWKDCBJVwK0TIFRFgr3fjjNRJPCBw5XQ7vbCqTD7XES0dwzLYOA30cLEhK6 jgS/km1f2c+ZpLDxOjggSz54IxbzQEoweaFViwm5SkSqpjxIgrmXbzwtVW6C9A== )`
	RRSIG=27306 and DNSKEY=27306 verifies the DS RRset
	DS=24081/SHA-256 is now in the chain-of-trust
	`MESH.GOV. 3600 IN DS ( 24081 7 2 a74326c13fa3b95865f3b09f5a5e40b41b4169494546ad41dde56c3ced7e2252 )`
	`MESH.GOV. 3600 IN DS 24081 7 1 534a85d7375550f141260e928bd9089b18b77508`
	Query to gslb02.nlm.nih.GOV for MESH.GOV/DNSKEY
	Received 1181 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (1181 bytes) ;; HEADER SECTION ;; id = 45474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) MESH.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaYQ/SiUc6jlOcQosuwvWVKBBkdlOIyoUebL/4hr4xwvG8jwxRd4HAtS1f4H8DBcPp1CFwnJ RQoBQB/leLC6Jo3sJ2L+5oTBT1SNKQenVpzJBY8J2IJ7FBs+LMNkwa4cIq9CG60pHlLRLUTUevK6 bLaCYm3My1T9x03l+M+JJ9W88hN8gPOv8UFNwmFLNAjX0jgLykU5rrKExu6XPekSPxD63Gi7Xhkl 0m+6XJf+hMEZDXUZ+4R3iOBj6pCfVYclL0YaEuQHyh5jNKYgvFM7ftWrQhJtxfozIVZSXM6NYIO2 xBmwkXv53/U2wLNNyuluT4ZlNWlhdhjUENGl/paD3EU= ) ; Key ID = 24081 MESH.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAaE8PLC3EbH1d3Hf5IcbHOUAC9XPHv6H4TP+GS+RStAUYp2kp6/LtEBvtnRRvbH6y5TGFmHo su/oNTy+lLZXbm3/4L5yYBMN2yl9R0AC+L5PoxqMDSsICXS9WQYpqv/VKBy9QasqDPhZO3o2ETtX jqhDEYHp3NxPhog3l7eF5Z1l0TPvV0P8GD8OWHTMyHAxa//XaV+8D0bGdR4xh0IlSKrNGcRsAi05 Jti+dX2Igsk5hgYuQLCcL7mAqpi1OOSI3FhGffDFxQuvACWiI5pRjKAGfuYKN2ey5DXifgdiPWy9 G0z+1R4PrDVnIadLci2w1Xrr8dARujFYI3WNSpbOttE= ) ; Key ID = 45524 MESH.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210207062032 20210117062032 24081 mesh.gov. NcxEgd9UiyTaOm4hDDiBzMDQzQUgH99Izel+Gd3tj6pd3+4zrCeviSJZdZgMIMmeuE2lF+WN15Tv BkOkO10+E8UOCYuF73BlOIRtv4j2E19DqvafII7LX1lPvURCsrLnZvNbBmcvbQCysDAstOm8xORp D9xagGzoad+JA8oj5FX9lqS7i5ZZggeKeTjU0UFuPHrhxQlx709ioqey59rfUrjCPRulnsKp4BKP BpV0DI5A9/1IYo+luUkI9cB7tRT+Dn+QmiUFpTiLVTviTAJ4hWdwytG96B3e/4WsF+lgDc3pzHGh wi5X3Z1wUXNOKLeJ4bM5/E1OU/j8O2vWT24gYA== ) MESH.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210206100038 20210116100038 45524 mesh.gov. RaAPFxtuQzFTZSvF46UIsdFto1GiXMLJtUei2pb8nxFRYpQBz4MbboR+khkUwuGtJiVOFk26oqHS stC1m/EYxTsCVDuUBnZ5vWps9i6zaNOuc+zcCo0zV1FURF2eIwVbg+CoOIe9EPOLQM05+zGpy59L VIRRLQ027EMJYv11OwOLMSeqpH7SM2IaNBeNiWsuTAmAg6rUS0EZV1WDlvnqBDq0Ja/xD6M4S77I exEqNfDEltnKjYedgBX9aefl7a7iYyEdNlJqKp4ahKz5ukkKvCV1CGUID/iOZb89h51LF1KzlbmY PVapIkfbp6dJ5Xv1Junr7UuJIRj5W3h60knKbg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for MESH.GOV
	`MESH.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaYQ/SiUc6jlOcQosuwvWVKBBkdlOIyoUebL/4hr4xwvG8jwxRd4HAtS1f4H8DBcPp1CFwnJ RQoBQB/leLC6Jo3sJ2L+5oTBT1SNKQenVpzJBY8J2IJ7FBs+LMNkwa4cIq9CG60pHlLRLUTUevK6 bLaCYm3My1T9x03l+M+JJ9W88hN8gPOv8UFNwmFLNAjX0jgLykU5rrKExu6XPekSPxD63Gi7Xhkl 0m+6XJf+hMEZDXUZ+4R3iOBj6pCfVYclL0YaEuQHyh5jNKYgvFM7ftWrQhJtxfozIVZSXM6NYIO2 xBmwkXv53/U2wLNNyuluT4ZlNWlhdhjUENGl/paD3EU= ) ; Key ID = 24081`
	`MESH.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAaE8PLC3EbH1d3Hf5IcbHOUAC9XPHv6H4TP+GS+RStAUYp2kp6/LtEBvtnRRvbH6y5TGFmHo su/oNTy+lLZXbm3/4L5yYBMN2yl9R0AC+L5PoxqMDSsICXS9WQYpqv/VKBy9QasqDPhZO3o2ETtX jqhDEYHp3NxPhog3l7eF5Z1l0TPvV0P8GD8OWHTMyHAxa//XaV+8D0bGdR4xh0IlSKrNGcRsAi05 Jti+dX2Igsk5hgYuQLCcL7mAqpi1OOSI3FhGffDFxQuvACWiI5pRjKAGfuYKN2ey5DXifgdiPWy9 G0z+1R4PrDVnIadLci2w1Xrr8dARujFYI3WNSpbOttE= ) ; Key ID = 45524`
	DNSKEY=24081/SEP is now in the chain-of-trust
	DS=24081/SHA-256 verifies DNSKEY=24081/SEP
	DS=24081/SHA-1 verifies DNSKEY=24081/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MESH.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210207062032 20210117062032 24081 mesh.gov. NcxEgd9UiyTaOm4hDDiBzMDQzQUgH99Izel+Gd3tj6pd3+4zrCeviSJZdZgMIMmeuE2lF+WN15Tv BkOkO10+E8UOCYuF73BlOIRtv4j2E19DqvafII7LX1lPvURCsrLnZvNbBmcvbQCysDAstOm8xORp D9xagGzoad+JA8oj5FX9lqS7i5ZZggeKeTjU0UFuPHrhxQlx709ioqey59rfUrjCPRulnsKp4BKP BpV0DI5A9/1IYo+luUkI9cB7tRT+Dn+QmiUFpTiLVTviTAJ4hWdwytG96B3e/4WsF+lgDc3pzHGh wi5X3Z1wUXNOKLeJ4bM5/E1OU/j8O2vWT24gYA== )`
	`MESH.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210206100038 20210116100038 45524 mesh.gov. RaAPFxtuQzFTZSvF46UIsdFto1GiXMLJtUei2pb8nxFRYpQBz4MbboR+khkUwuGtJiVOFk26oqHS stC1m/EYxTsCVDuUBnZ5vWps9i6zaNOuc+zcCo0zV1FURF2eIwVbg+CoOIe9EPOLQM05+zGpy59L VIRRLQ027EMJYv11OwOLMSeqpH7SM2IaNBeNiWsuTAmAg6rUS0EZV1WDlvnqBDq0Ja/xD6M4S77I exEqNfDEltnKjYedgBX9aefl7a7iYyEdNlJqKp4ahKz5ukkKvCV1CGUID/iOZb89h51LF1KzlbmY PVapIkfbp6dJ5Xv1Junr7UuJIRj5W3h60knKbg== )`
	RRSIG=24081 and DNSKEY=24081/SEP verifies the DNSKEY RRset
	RRSIG=45524 and DNSKEY=45524 verifies the DNSKEY RRset
	DNSKEY=45524 is now in the chain-of-trust
	Query to gslb01.nlm.nih.GOV for MESH.GOV/A
	Received 349 bytes from 130.14.252.50
	;; Answer received from 130.14.252.50 (349 bytes) ;; HEADER SECTION ;; id = 56683 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (2 records) MESH.GOV. 30 IN A 130.14.16.4 MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210130103652 20210109103652 45524 mesh.gov. ndP33IeH8NvRbp2ltRWQhNQV7RgGsA9fUVXYqp4pdBgq7kcEFOLhpv3E5MDpA5+Md23hF1S33R8Y jH4glELH6il977vTXo+/SF8fhJbAMnF0+clbZMOVGUTCNZglpqFmRd15H/nrFuiq0kfEwv91RiTg ZvOh6I0vWKigAjqtTFROtnP7jd+sYUN8YdnUJh1kNbHf7SSTIHfibMUQv1JZkvcWX4n2XwrzFIhH 4PR5w27WWSVhIgZ8chQUPepw/1cBPHDJRXMqZWfeusIRCEEdGb5OsC1o7wxIKStsWRYyW7Ocb6tv gJ31DfQVoWy9PsqjQUfzBtWwopDkyXSV0RTH6A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MESH.GOV is authoritative for MESH.GOV
	Found RRSIG signed by mesh.gov zone
	Query to gslb03.nlm.nih.GOV for MESH.GOV/SOA
	Received 747 bytes from 130.14.252.53
	;; Answer received from 130.14.252.53 (747 bytes) ;; HEADER SECTION ;; id = 65312 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN SOA ;; ANSWER SECTION (2 records) MESH.GOV. 500 IN SOA ( gslb01.nlm.nih.GOV. hostmaster.gslb01.nlm.nih.GOV. 2020100602 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) MESH.GOV. 500 IN RRSIG ( SOA 7 2 500 20210124000431 20210103000431 45524 mesh.gov. mCFJBIbFxBW0FzU8ejMIZjGksQbdgDh71mVlRacDTbBgOBMa0uzKdWEJVEadGh2E7LhrY3t1RJuD gYpZUlkik99hVB1+SUd70TSy0q8uE9Y95dbuvkVVedNA2GJXSEsJia7YbvcaH5simUaYWFYu1w8V jVIyK2XybrInVUkJtiHd5TeoDF/HoOJlKT7UWJ8sioqKaf+cxWYJ4ggGuBcHuVRwXDALLJNrsftI EQpW9t6fvXCmZX1jLI32PzrMjj8L4TWZr11ACDXpCNSYpCXKc96LTzkTYzeQCylZ3NvlR4aorO+J yC5zqhxazu65Ap6OVxZMN4rNXQKJ7DJkWdWQvA== ) ;; AUTHORITY SECTION (4 records) MESH.GOV. 60 IN NS gslb01.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb02.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb03.nlm.nih.GOV. MESH.GOV. 60 IN RRSIG ( NS 7 2 60 20210205122451 20210115122451 45524 mesh.gov. FLFN21wwIjcjeWTf2EfLjF3q3i1f56OxjLXLWUFJhOhc42GDWnLDVVN3uOaNOZAUsLnwBiumofe8 X95GxszAVGTtb941vTx9o7Ohknd17DqEY/h5zvNfWKYd/F8X/nnF9yjExv09+PbxMeq/0tCy37hG 9Nmjy3prtl+tQKFtuCOWolsrG0cgFY64+umEfmdTimcGOtFRqchwN+tLhhxNP1+5jrcMWnSfu7zV +xUDwZILyB93ryo8E9djH9Bec5nSC6G2RMqHBfe1DQURfoSeFDtdK5nikj6uh+R7Oc5G84s+mnKz RKBu5OzPLGZXeimR+VT0f04qA3WW86nKq1HFZw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb02.nlm.nih.GOV for MESH.GOV/SOA
	Received 747 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (747 bytes) ;; HEADER SECTION ;; id = 58156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN SOA ;; ANSWER SECTION (2 records) MESH.GOV. 500 IN SOA ( gslb01.nlm.nih.GOV. hostmaster.gslb01.nlm.nih.GOV. 2020100602 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) MESH.GOV. 500 IN RRSIG ( SOA 7 2 500 20210206181550 20210116181550 45524 mesh.gov. oIWQgZZwAZFdHfPoteD6r2qqIuvGimbGkC8iMzUuUV2tBfP3UgA201MTtVDanGkh2gVHj6U1TBQ8 xFQjBwTxT6cfy3N8moU+btHL/qQ26y7NYZrw4TbmdqT7p2ePUHKVLzJSBfikRl5gIkk1QgWa875W ZWN/jNXEOrjuMdG1DDUrkEb+IX0qtRiwatpWPktqpfNdNwsI3mDiNT3+ArKqii+vLPutQvSOYlth NsnIOx3GoSlipm038wS8j8IwcVjrdXwjiGGT/b47g4O0mT3u8juaIa3laDRHLM0pQE067ZTWbZeJ zBrIb5Y55qv7LBy8qY2lmxTJFr6ILEtFkDYfng== ) ;; AUTHORITY SECTION (4 records) MESH.GOV. 60 IN NS gslb01.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb02.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb03.nlm.nih.GOV. MESH.GOV. 60 IN RRSIG ( NS 7 2 60 20210205014706 20210115014706 45524 mesh.gov. JFnQcjlH8xWCzhkA6xvaUWpiliS6Y3rMKNH2WmH2vqzrEDPfh1yHuWcFz73aaiNzZ93ekTFT9Xi8 4x7AA56IvfZXdlHBO48C9nnxJgDVoXTL/TirgVIPlvjey519IcskixR2UVjU5HjycvqQU/HGUPwf l1xMmwbvfjE6OLwEDeN2fhbiLzww8a/8B6yDd0BiSsETQdnMLAVpPsXIhICd2o8F8RflDYdi7lgM 5wDjcRQ5sID73hhQI/DWow+H7B3j3DrGb0Yp51A4GvG3nr5+EukCoycuHonS5miOunSvrAn+2kMW Tv+Ijo7qryU4W8cr5cFgDtTD1bb05FNhNRWCeA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb01.nlm.nih.GOV for MESH.GOV/SOA
	Received 747 bytes from 130.14.252.50
	;; Answer received from 130.14.252.50 (747 bytes) ;; HEADER SECTION ;; id = 37933 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN SOA ;; ANSWER SECTION (2 records) MESH.GOV. 500 IN SOA ( gslb01.nlm.nih.GOV. hostmaster.gslb01.nlm.nih.GOV. 2020100602 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) MESH.GOV. 500 IN RRSIG ( SOA 7 2 500 20210131000436 20210110000436 45524 mesh.gov. QvxE4YGAc3zs+870Xr/SYXxJF5HV6M18jAXp29jS2JHpCEKUMRHopg4Gk1nlwdfUPprVc5MAhyw5 SPOXQ1QRxs0eg/F2G0CIyX8hXf6x0VZ9LVuZl1YeHwpcgqlKUmJaoXcyZERhB5z5EI8ARvgV2N0P wO1HYuDzDxWYt2TGznaiXhSwivELVBHRNq1rsy8zXLWDF4WZyWnSsWvbe8lHZqWXGsYF/O+p4k3E z//lZq1qTTi0ang7IhC50Juw62PCmpqPsQVXvLd0C2BIfqinscFbEMTDkMq7rntFKm1d76VEp0Au Bcnz23laSmfj+03/kQMioQpti1X6WAcaG83nGQ== ) ;; AUTHORITY SECTION (4 records) MESH.GOV. 60 IN NS gslb01.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb03.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb02.nlm.nih.GOV. MESH.GOV. 60 IN RRSIG ( NS 7 2 60 20210130104042 20210109104042 45524 mesh.gov. X350EiLLhx6hL3RprFvOtLrvqK7h/agAlc6iVC/dVQp9B1q2w+Y5fQTnxB+sXFsbvBOXlIyrAqXU hPzoK9uudnLSISxVb0zUjlbmfrIypSvvyLjcvC+JDyVSLJFfjM/u8kBh6c5qrfKkQ/YTEBYMuWsa kxzV8YN5RLde4dPisn6wnBhzuZgdT7IqlgwI0J60IJbY0dnqBlR/Y61tW79efcBD0NFjRgWXGHvT 2hfQslBuSjW1JJfKcGQ2o3U9lQ3nXMvB1ASIyGwZdG71C8BuXWfhCpiQbNW1+jsI/nEe0dj8sUU+ bDEgQIH7cVssiTyco4fN91JOOw8O7ZrxAkP6uQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb01.nlm.nih.GOV for MESH.GOV/A
	Received 349 bytes from 130.14.252.50
	;; Answer received from 130.14.252.50 (349 bytes) ;; HEADER SECTION ;; id = 50618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (2 records) MESH.GOV. 30 IN A 130.14.16.4 MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210130142100 20210109142100 45524 mesh.gov. F9G9FQ0s8zNqur1OHjTqHMq9taklw+p2KvOg2EPeeYAc+SHjZdFWzkPrxZz+pJIRnhRWs2GBtxgd uIFAbPGy9AfEzaYMDbr0dB5XWmk5IlFYdzn+BI7H3cBcJnJCAc8jXdrqWWrkMsxc7JhHAUqcpXxS ydz545YtlfECEyO08J0FWzmKwXjuXvJwQ7KfnD8JvgpenEGyp2dv033ZOrpd7Tz3Rt6U7jz249Hb cqMh9qfJwqFbsQbTnVzIaz17c4vhis330DWWgxFBNKSZrQIyMxdHKd/TB2zZtjDl4lMXSSsbue9w aqq7RqDkv8s0hp65MHvyBHkrmb0briKfFCJz1w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MESH.GOV A RR has value 130.14.16.4
	Found 1 RRSIGs over A RRset
	`MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210130142100 20210109142100 45524 mesh.gov. F9G9FQ0s8zNqur1OHjTqHMq9taklw+p2KvOg2EPeeYAc+SHjZdFWzkPrxZz+pJIRnhRWs2GBtxgd uIFAbPGy9AfEzaYMDbr0dB5XWmk5IlFYdzn+BI7H3cBcJnJCAc8jXdrqWWrkMsxc7JhHAUqcpXxS ydz545YtlfECEyO08J0FWzmKwXjuXvJwQ7KfnD8JvgpenEGyp2dv033ZOrpd7Tz3Rt6U7jz249Hb cqMh9qfJwqFbsQbTnVzIaz17c4vhis330DWWgxFBNKSZrQIyMxdHKd/TB2zZtjDl4lMXSSsbue9w aqq7RqDkv8s0hp65MHvyBHkrmb0briKfFCJz1w== )`
	RRSIG=45524 and DNSKEY=45524 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MESH.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: