DNSSEC Analyzer - MYFDIC.GOV

Domain Name:

Time: 2021-01-17 10:26:22 UTC, NTP stratum 4

Analyzing DNSSEC problems for MYFDIC.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 44375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to i.root-servers.net for MYFDIC.GOV/A
	Received 668 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (668 bytes) ;; HEADER SECTION ;; id = 49211 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210130050000 20210117040000 42351 . Uqx31Wf45Vvi7NyeZMW6zqcAcDZMD6wpnF+EdNxqrb0l/bvTnP2z75eIA5PWkd5Tduq1DTzNZhaB 8TxWdY6LC74o1e6M7sq+pJpg47Mn7JQBgay1+7jpRqd5nHo9StkB7Nexyxe6UZduuJaTkiXJ5Ubd 7Dqime2PlXCkEB5IV1LbhsMhI8eaQqpVE0VCx+xcS5syHMByLrzux6qKRM5W/lOPMYkwK6qqF2Sl GtPH7/6161eHPLefAhgXXfm/vhif4rEWx+q+JeVH6Ra7ajLuJ/s4s/4sDUHQY2MD56qASRAHOLa9 hQ4ehHLJ+aOT0W07CdFrLSGeTWxZF0jg0lVTCA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (661 bytes) ;; HEADER SECTION ;; id = 24014 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210130050000 20210117040000 42351 . Uqx31Wf45Vvi7NyeZMW6zqcAcDZMD6wpnF+EdNxqrb0l/bvTnP2z75eIA5PWkd5Tduq1DTzNZhaB 8TxWdY6LC74o1e6M7sq+pJpg47Mn7JQBgay1+7jpRqd5nHo9StkB7Nexyxe6UZduuJaTkiXJ5Ubd 7Dqime2PlXCkEB5IV1LbhsMhI8eaQqpVE0VCx+xcS5syHMByLrzux6qKRM5W/lOPMYkwK6qqF2Sl GtPH7/6161eHPLefAhgXXfm/vhif4rEWx+q+JeVH6Ra7ajLuJ/s4s/4sDUHQY2MD56qASRAHOLa9 hQ4ehHLJ+aOT0W07CdFrLSGeTWxZF0jg0lVTCA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 30968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210130050000 20210117040000 42351 . Uqx31Wf45Vvi7NyeZMW6zqcAcDZMD6wpnF+EdNxqrb0l/bvTnP2z75eIA5PWkd5Tduq1DTzNZhaB 8TxWdY6LC74o1e6M7sq+pJpg47Mn7JQBgay1+7jpRqd5nHo9StkB7Nexyxe6UZduuJaTkiXJ5Ubd 7Dqime2PlXCkEB5IV1LbhsMhI8eaQqpVE0VCx+xcS5syHMByLrzux6qKRM5W/lOPMYkwK6qqF2Sl GtPH7/6161eHPLefAhgXXfm/vhif4rEWx+q+JeVH6Ra7ajLuJ/s4s/4sDUHQY2MD56qASRAHOLa9 hQ4ehHLJ+aOT0W07CdFrLSGeTWxZF0jg0lVTCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210130050000 20210117040000 42351 . Uqx31Wf45Vvi7NyeZMW6zqcAcDZMD6wpnF+EdNxqrb0l/bvTnP2z75eIA5PWkd5Tduq1DTzNZhaB 8TxWdY6LC74o1e6M7sq+pJpg47Mn7JQBgay1+7jpRqd5nHo9StkB7Nexyxe6UZduuJaTkiXJ5Ubd 7Dqime2PlXCkEB5IV1LbhsMhI8eaQqpVE0VCx+xcS5syHMByLrzux6qKRM5W/lOPMYkwK6qqF2Sl GtPH7/6161eHPLefAhgXXfm/vhif4rEWx+q+JeVH6Ra7ajLuJ/s4s/4sDUHQY2MD56qASRAHOLa9 hQ4ehHLJ+aOT0W07CdFrLSGeTWxZF0jg0lVTCA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (957 bytes) ;; HEADER SECTION ;; id = 9208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=15489 is now in the chain-of-trust
	Query to d.gov-servers.net for MYFDIC.GOV/A
	Received 534 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (534 bytes) ;; HEADER SECTION ;; id = 45902 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) MYFDIC.GOV. 86400 IN NS a9-66.akam.net. MYFDIC.GOV. 86400 IN NS a13-67.akam.net. MYFDIC.GOV. 86400 IN NS a28-65.akam.net. MYFDIC.GOV. 86400 IN NS a10-66.akam.net. MYFDIC.GOV. 86400 IN NS a1-55.akam.net. MYFDIC.GOV. 86400 IN NS a18-64.akam.net. MYFDIC.GOV. 3600 IN DS ( 42856 8 2 08fc8884e38501f0493f64384a8c6d87cc15d8f45d2963b03c6b11da222c379b ) MYFDIC.GOV. 3600 IN DS ( 16552 8 2 154e720fca215fad00b09617de258e62b8175ca00951e4fc089d644a1d2ce449 ) MYFDIC.GOV. 3600 IN DS 42856 8 1 ab61d338e23f473098ce7f23204ea3cfd984a60c MYFDIC.GOV. 3600 IN DS 16552 8 1 923e1a3430a57f4a67e7486f6e45832969bbf17f MYFDIC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210124091008 20210117091008 27306 gov. dXBAgisxJXp8JwXloGycd+USqxYfg7Be/YTENJuNCDJAcPXYhxTY5u58APSJwbLrbvefS6gUMWuD GZo4+fm2drgMy1Vbw1b89eoENQhvc+lOI17GfGtFZqxCeBnkQJqdx4d/OWaTWb6wnRctStGs6fIn iQFUQok2S7fHuu/pBoKKCeuciDJR5Kq5U0UAeLldfZziqtCv+nxmRkPIu1MEBg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for MYFDIC.GOV/DNSKEY
	Received 534 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (534 bytes) ;; HEADER SECTION ;; id = 27276 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) MYFDIC.GOV. 86400 IN NS a9-66.akam.net. MYFDIC.GOV. 86400 IN NS a13-67.akam.net. MYFDIC.GOV. 86400 IN NS a28-65.akam.net. MYFDIC.GOV. 86400 IN NS a10-66.akam.net. MYFDIC.GOV. 86400 IN NS a1-55.akam.net. MYFDIC.GOV. 86400 IN NS a18-64.akam.net. MYFDIC.GOV. 3600 IN DS ( 42856 8 2 08fc8884e38501f0493f64384a8c6d87cc15d8f45d2963b03c6b11da222c379b ) MYFDIC.GOV. 3600 IN DS ( 16552 8 2 154e720fca215fad00b09617de258e62b8175ca00951e4fc089d644a1d2ce449 ) MYFDIC.GOV. 3600 IN DS 42856 8 1 ab61d338e23f473098ce7f23204ea3cfd984a60c MYFDIC.GOV. 3600 IN DS 16552 8 1 923e1a3430a57f4a67e7486f6e45832969bbf17f MYFDIC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210124091008 20210117091008 27306 gov. dXBAgisxJXp8JwXloGycd+USqxYfg7Be/YTENJuNCDJAcPXYhxTY5u58APSJwbLrbvefS6gUMWuD GZo4+fm2drgMy1Vbw1b89eoENQhvc+lOI17GfGtFZqxCeBnkQJqdx4d/OWaTWb6wnRctStGs6fIn iQFUQok2S7fHuu/pBoKKCeuciDJR5Kq5U0UAeLldfZziqtCv+nxmRkPIu1MEBg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MYFDIC.GOV

MYFDIC.GOV

	Checking DS between GOV and MYFDIC.GOV
	Query to a.gov-servers.net for MYFDIC.GOV/DS
	Received 402 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (402 bytes) ;; HEADER SECTION ;; id = 62409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN DS ;; ANSWER SECTION (5 records) MYFDIC.GOV. 3600 IN DS ( 42856 8 2 08fc8884e38501f0493f64384a8c6d87cc15d8f45d2963b03c6b11da222c379b ) MYFDIC.GOV. 3600 IN DS ( 16552 8 2 154e720fca215fad00b09617de258e62b8175ca00951e4fc089d644a1d2ce449 ) MYFDIC.GOV. 3600 IN DS 42856 8 1 ab61d338e23f473098ce7f23204ea3cfd984a60c MYFDIC.GOV. 3600 IN DS 16552 8 1 923e1a3430a57f4a67e7486f6e45832969bbf17f MYFDIC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210124091008 20210117091008 27306 gov. dXBAgisxJXp8JwXloGycd+USqxYfg7Be/YTENJuNCDJAcPXYhxTY5u58APSJwbLrbvefS6gUMWuD GZo4+fm2drgMy1Vbw1b89eoENQhvc+lOI17GfGtFZqxCeBnkQJqdx4d/OWaTWb6wnRctStGs6fIn iQFUQok2S7fHuu/pBoKKCeuciDJR5Kq5U0UAeLldfZziqtCv+nxmRkPIu1MEBg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for MYFDIC.GOV in the GOV zone
	DS=42856/SHA-256 has algorithm RSASHA256
	DS=16552/SHA-256 has algorithm RSASHA256
	DS=42856/SHA-1 has algorithm RSASHA256
	DS=16552/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`MYFDIC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210124091008 20210117091008 27306 gov. dXBAgisxJXp8JwXloGycd+USqxYfg7Be/YTENJuNCDJAcPXYhxTY5u58APSJwbLrbvefS6gUMWuD GZo4+fm2drgMy1Vbw1b89eoENQhvc+lOI17GfGtFZqxCeBnkQJqdx4d/OWaTWb6wnRctStGs6fIn iQFUQok2S7fHuu/pBoKKCeuciDJR5Kq5U0UAeLldfZziqtCv+nxmRkPIu1MEBg== )`
	RRSIG=27306 and DNSKEY=27306 verifies the DS RRset
	DS=42856/SHA-256 is now in the chain-of-trust
	DS=16552/SHA-256 is now in the chain-of-trust
	`MYFDIC.GOV. 3600 IN DS ( 42856 8 2 08fc8884e38501f0493f64384a8c6d87cc15d8f45d2963b03c6b11da222c379b )`
	`MYFDIC.GOV. 3600 IN DS ( 16552 8 2 154e720fca215fad00b09617de258e62b8175ca00951e4fc089d644a1d2ce449 )`
	`MYFDIC.GOV. 3600 IN DS 42856 8 1 ab61d338e23f473098ce7f23204ea3cfd984a60c`
	`MYFDIC.GOV. 3600 IN DS 16552 8 1 923e1a3430a57f4a67e7486f6e45832969bbf17f`
	Query to a13-67.akam.net for MYFDIC.GOV/DNSKEY
	Received 1505 bytes from 2.22.230.67
	;; Answer received from 2.22.230.67 (1505 bytes) ;; HEADER SECTION ;; id = 12825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) MYFDIC.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAbzuEAJYRwq9+xmMLzDb/99WI7LydWe+euwgE+Ymk+XAB6nLv/l86ZomVcrx4TVRnvCTuGq/ T/2mbnWA2zf1iwWwtwTZZFFPIisRCfBN2/RU0AUETbiSIkpoKkIdqTe1er3uaT7UyxRfFUlO3yAQ ioT17uT5YbsyrQXg8XLuAzzL ) ; Key ID = 29724 MYFDIC.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAcJKIESdAgB5L09vsltxcuilvifPhrj+Obc32Qbq2ivmHU3OeTIGwypeL4QH9e8mw5fEgCxA 3ZgkYxnw/G32AYgw8t+NQJB99Xu9NAi/aSNQKFKiEgZmSZudyIpxgM+BWUEwPhzTXIbe/IfZRR6f JL8AEpj0f9LCBpnqEd+U+mk+3n6bTST+230WeMtaQkhu6kUGezvx/OBvtVTxAZjn1M3UWOOlWPge cOKWChtHjnB0jKLGFzOPN/nkx4l5ZwXjcuCwC/DhvEzU24ezdDznD9J0l/0KpvoojuLf8EkZSb7H SQDO+1cfJ09XATcagDYcQJZp7EskD5zCmyzO2sqq64M= ) ; Key ID = 42856 MYFDIC.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAcyKz3Z2d0dwWTOR3pMueFuCHdmVcZYvzgrzLcqlG9CV2ClAN4Fze0CMHLfLzi3yK2TwmsxW w0pJIsoL8OWZEM9F7M6yK9i4PrZpa8rBzYxbRSDzMkaIdTGLnFFkCM5HLnVNQal90dw8RwsHwfUn kVWhgJKmWdotZLpVz9X63xfqxFrWQcg1ZVGQ1SRWelwN/0DYH2LuUnalTobGQniJhieK9bgjy9X/ nKJqnnCLImTvguxcmfjnwGFMTWWVsocEQcXs51VyxBiNvQAfbIxz3xwB79APMEoSPDwzRwwW6FI+ MRS5IFmNRK/tEDZiN53w/Cupto6RwS6JHcuOTXJNX1U= ) ; Key ID = 16552 MYFDIC.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210121093136 20210117083715 16552 myfdic.gov. d3Z+Rg/7cyqjWR3OHstYGG442nUb+Z9HbVY0MN143aNdbOvpmJ5CiVb9lxJGFWSGypVyokHgNmLh 8isN6LMAfQcQs+yOV6ca0lABeCxKIAhznYXYZG9D6Tw7Etdrb6GfvcCYi5T8uRcS489x2uHh/SEp VF/LHX79hHPPIqIhw7RoiKOnGhlghYJtRZz2toc8x8/K8mOG15VuuPIRP84h2sBNUa/7jp2imPqK 73BEHm6/CJpJlAmzeRMgUQxqhQHahRiIjQVCYLc287ZzXhz6nAhmqgjp1i0bssrblLjZP4Etcls8 HHf3R/UDDJBR5ht5GEB20LVEHrwg6KveQGdDUQ== ) MYFDIC.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210121093136 20210117083715 29724 myfdic.gov. WN75qF86AUxpP5EUxOkTg66B3hQpBS4hzi+4tEfjx+ao7qR7x+RAjjmxC6/jbnZAPjJweTnsUYSA ieLPEUEqMB9i+/H+TJlACN15AnYu22M9OKsCJzhyI6S3pWmcMV5La+HpFs1QGT5W74PKq/AYiDSY mWl5POoPUGyFqjUyNyQ= ) MYFDIC.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210121093136 20210117083715 42856 myfdic.gov. QjL5aJDQDedjAl8Sj+PbJAyaRQDY79DyBl/du9y/zIzIKljF+vGUqoi7cFHofrgBnli0UWIR/rY9 QkAmddTEApqIWV+3vWwtKVdytp48Furr4LOo1fwBCavRlxHBxUQWvPuNc1Sl9HTBoKhIE+R4ITax KjM2NaaXWnlQHN4FZfLwnEAV9LKwujhm43Qh92Og8FQ7rBW0fN8TqERPeTkl2E50iqWRRa5W8ENk udcvkT3V4DpmNUb5cJVOBvcn62m73RIUYjimjyU66WxdmHZLduOxhtmJz0oJy5k1PWUXHgptX/zw baJCGYm/QaVAcLcAHE9T1M5qCpbCF3dJTmu1Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for MYFDIC.GOV
	`MYFDIC.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAbzuEAJYRwq9+xmMLzDb/99WI7LydWe+euwgE+Ymk+XAB6nLv/l86ZomVcrx4TVRnvCTuGq/ T/2mbnWA2zf1iwWwtwTZZFFPIisRCfBN2/RU0AUETbiSIkpoKkIdqTe1er3uaT7UyxRfFUlO3yAQ ioT17uT5YbsyrQXg8XLuAzzL ) ; Key ID = 29724`
	`MYFDIC.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAcJKIESdAgB5L09vsltxcuilvifPhrj+Obc32Qbq2ivmHU3OeTIGwypeL4QH9e8mw5fEgCxA 3ZgkYxnw/G32AYgw8t+NQJB99Xu9NAi/aSNQKFKiEgZmSZudyIpxgM+BWUEwPhzTXIbe/IfZRR6f JL8AEpj0f9LCBpnqEd+U+mk+3n6bTST+230WeMtaQkhu6kUGezvx/OBvtVTxAZjn1M3UWOOlWPge cOKWChtHjnB0jKLGFzOPN/nkx4l5ZwXjcuCwC/DhvEzU24ezdDznD9J0l/0KpvoojuLf8EkZSb7H SQDO+1cfJ09XATcagDYcQJZp7EskD5zCmyzO2sqq64M= ) ; Key ID = 42856`
	`MYFDIC.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAcyKz3Z2d0dwWTOR3pMueFuCHdmVcZYvzgrzLcqlG9CV2ClAN4Fze0CMHLfLzi3yK2TwmsxW w0pJIsoL8OWZEM9F7M6yK9i4PrZpa8rBzYxbRSDzMkaIdTGLnFFkCM5HLnVNQal90dw8RwsHwfUn kVWhgJKmWdotZLpVz9X63xfqxFrWQcg1ZVGQ1SRWelwN/0DYH2LuUnalTobGQniJhieK9bgjy9X/ nKJqnnCLImTvguxcmfjnwGFMTWWVsocEQcXs51VyxBiNvQAfbIxz3xwB79APMEoSPDwzRwwW6FI+ MRS5IFmNRK/tEDZiN53w/Cupto6RwS6JHcuOTXJNX1U= ) ; Key ID = 16552`
	DNSKEY=42856/SEP is now in the chain-of-trust
	DS=42856/SHA-256 verifies DNSKEY=42856/SEP
	DS=42856/SHA-1 verifies DNSKEY=42856/SEP
	DNSKEY=16552/SEP is now in the chain-of-trust
	DS=16552/SHA-256 verifies DNSKEY=16552/SEP
	DS=16552/SHA-1 verifies DNSKEY=16552/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MYFDIC.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210121093136 20210117083715 16552 myfdic.gov. d3Z+Rg/7cyqjWR3OHstYGG442nUb+Z9HbVY0MN143aNdbOvpmJ5CiVb9lxJGFWSGypVyokHgNmLh 8isN6LMAfQcQs+yOV6ca0lABeCxKIAhznYXYZG9D6Tw7Etdrb6GfvcCYi5T8uRcS489x2uHh/SEp VF/LHX79hHPPIqIhw7RoiKOnGhlghYJtRZz2toc8x8/K8mOG15VuuPIRP84h2sBNUa/7jp2imPqK 73BEHm6/CJpJlAmzeRMgUQxqhQHahRiIjQVCYLc287ZzXhz6nAhmqgjp1i0bssrblLjZP4Etcls8 HHf3R/UDDJBR5ht5GEB20LVEHrwg6KveQGdDUQ== )`
	`MYFDIC.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210121093136 20210117083715 29724 myfdic.gov. WN75qF86AUxpP5EUxOkTg66B3hQpBS4hzi+4tEfjx+ao7qR7x+RAjjmxC6/jbnZAPjJweTnsUYSA ieLPEUEqMB9i+/H+TJlACN15AnYu22M9OKsCJzhyI6S3pWmcMV5La+HpFs1QGT5W74PKq/AYiDSY mWl5POoPUGyFqjUyNyQ= )`
	`MYFDIC.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20210121093136 20210117083715 42856 myfdic.gov. QjL5aJDQDedjAl8Sj+PbJAyaRQDY79DyBl/du9y/zIzIKljF+vGUqoi7cFHofrgBnli0UWIR/rY9 QkAmddTEApqIWV+3vWwtKVdytp48Furr4LOo1fwBCavRlxHBxUQWvPuNc1Sl9HTBoKhIE+R4ITax KjM2NaaXWnlQHN4FZfLwnEAV9LKwujhm43Qh92Og8FQ7rBW0fN8TqERPeTkl2E50iqWRRa5W8ENk udcvkT3V4DpmNUb5cJVOBvcn62m73RIUYjimjyU66WxdmHZLduOxhtmJz0oJy5k1PWUXHgptX/zw baJCGYm/QaVAcLcAHE9T1M5qCpbCF3dJTmu1Rw== )`
	RRSIG=16552 and DNSKEY=16552/SEP verifies the DNSKEY RRset
	RRSIG=29724 and DNSKEY=29724 verifies the DNSKEY RRset
	RRSIG=42856 and DNSKEY=42856/SEP verifies the DNSKEY RRset
	DNSKEY=29724 is now in the chain-of-trust
	Query to a10-66.akam.net for MYFDIC.GOV/A
	Received 521 bytes from 96.7.50.66
	;; Answer received from 96.7.50.66 (521 bytes) ;; HEADER SECTION ;; id = 43772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) MYFDIC.GOV. 900 IN SOA ( dfwcnsgms01.fdic.GOV. unixops.fdic.GOV. 2008471592 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) MYFDIC.GOV. 900 IN RRSIG ( SOA 8 2 900 20210121095321 20210117085321 29724 myfdic.gov. Rq4tYYBXvqgpa6ghvPwLa84AMO4s9MOG9zwdmJ9UrSiN8zy8FkMRwtrodJIjwjbZfWNxlo36lGzQ Q3v27/gBCjRvW2iZDI/zUWDSk+PYhTbX/FmPu1UBaAV+fJPnvaPx+XfGoD+ruh3VoPUCtEFw10kn C1Jc7oZNK+OlO2+xUgE= ) prhst3k8ubsb2b0bfe7h43cj84abs7r3.MYFDIC.GOV. 900 IN NSEC3 ( 1 0 10 0e sid2pqrk9ddpdc26k7reo0hp5mbjpkjg NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) prhst3k8ubsb2b0bfe7h43cj84abs7r3.MYFDIC.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210120193024 20210116191141 29724 myfdic.gov. idQxaqN1gZL/AOtkqrtKD7IakI1lIRQS/H1wQata2RauSuYVQKqGCgDLyjJ/lN8OSJNBANk6ltrM r+5d+FsiE3QUYl8mGbX7sgXiZv/ljPHLB8d2F9KYjIiFHzWSDh0gV1roIy3asn8v3MCdzdwt1KSC ctsvZ15ov/X6K+81WmA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MYFDIC.GOV is authoritative for MYFDIC.GOV
	Found RRSIG signed by myfdic.gov zone
	Query to a28-65.akam.net for MYFDIC.GOV/SOA
	Received 1000 bytes from 95.100.173.65
	;; Answer received from 95.100.173.65 (1000 bytes) ;; HEADER SECTION ;; id = 53059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 23 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN SOA ;; ANSWER SECTION (2 records) MYFDIC.GOV. 900 IN SOA ( dfwcnsgms01.fdic.GOV. unixops.fdic.GOV. 2008471592 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) MYFDIC.GOV. 900 IN RRSIG ( SOA 8 2 900 20210121095321 20210117085321 29724 myfdic.gov. Rq4tYYBXvqgpa6ghvPwLa84AMO4s9MOG9zwdmJ9UrSiN8zy8FkMRwtrodJIjwjbZfWNxlo36lGzQ Q3v27/gBCjRvW2iZDI/zUWDSk+PYhTbX/FmPu1UBaAV+fJPnvaPx+XfGoD+ruh3VoPUCtEFw10kn C1Jc7oZNK+OlO2+xUgE= ) ;; AUTHORITY SECTION (23 records) MYFDIC.GOV. 900 IN NS 23.14.128.185. MYFDIC.GOV. 900 IN NS 60.254.128.45. MYFDIC.GOV. 900 IN NS a10-66.akam.net. MYFDIC.GOV. 900 IN NS 23.73.134.237. MYFDIC.GOV. 900 IN NS 72.246.0.10. MYFDIC.GOV. 900 IN NS 193.108.155.34. MYFDIC.GOV. 900 IN NS 23.205.121.134. MYFDIC.GOV. 900 IN NS a28-65.akam.net. MYFDIC.GOV. 900 IN NS 2.18.25.37. MYFDIC.GOV. 900 IN NS a9-66.akam.net. MYFDIC.GOV. 900 IN NS 23.207.197.166. MYFDIC.GOV. 900 IN NS 23.73.133.237. MYFDIC.GOV. 900 IN NS 23.73.133.141. MYFDIC.GOV. 900 IN NS 104.107.116.17. MYFDIC.GOV. 900 IN NS 72.246.192.168. MYFDIC.GOV. 900 IN NS 23.73.134.141. MYFDIC.GOV. 900 IN NS a18-64.akam.net. MYFDIC.GOV. 900 IN NS 193.108.152.143. MYFDIC.GOV. 900 IN NS a1-55.akam.net. MYFDIC.GOV. 900 IN NS 104.122.95.88. MYFDIC.GOV. 900 IN NS 72.247.124.98. MYFDIC.GOV. 900 IN NS a13-67.akam.net. MYFDIC.GOV. 900 IN RRSIG ( NS 8 2 900 20210121085450 20210117085321 29724 myfdic.gov. k7j1vzx5KHm1Vn3ldBh/CEKI22e6T191ogF7NlZILouWYJC8XhiH464U5ISmCi3n1aCzgpz+r8Yu FH9/kiERTk+14nBjrzD7O7vVjkYOYTYMBe104xqNo0v14mWH1uiyIyizP/odTi8aGRnETvdCPF+e IuSHz3f1jqpm8v7RqEE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a13-67.akam.net for MYFDIC.GOV/SOA
	Received 1000 bytes from 2.22.230.67
	;; Answer received from 2.22.230.67 (1000 bytes) ;; HEADER SECTION ;; id = 36678 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 23 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN SOA ;; ANSWER SECTION (2 records) MYFDIC.GOV. 900 IN SOA ( dfwcnsgms01.fdic.GOV. unixops.fdic.GOV. 2008471592 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) MYFDIC.GOV. 900 IN RRSIG ( SOA 8 2 900 20210121095321 20210117085321 29724 myfdic.gov. Rq4tYYBXvqgpa6ghvPwLa84AMO4s9MOG9zwdmJ9UrSiN8zy8FkMRwtrodJIjwjbZfWNxlo36lGzQ Q3v27/gBCjRvW2iZDI/zUWDSk+PYhTbX/FmPu1UBaAV+fJPnvaPx+XfGoD+ruh3VoPUCtEFw10kn C1Jc7oZNK+OlO2+xUgE= ) ;; AUTHORITY SECTION (23 records) MYFDIC.GOV. 900 IN NS 60.254.128.45. MYFDIC.GOV. 900 IN NS 2.18.25.37. MYFDIC.GOV. 900 IN NS 72.247.124.98. MYFDIC.GOV. 900 IN NS 23.205.121.134. MYFDIC.GOV. 900 IN NS a9-66.akam.net. MYFDIC.GOV. 900 IN NS 23.73.133.237. MYFDIC.GOV. 900 IN NS a18-64.akam.net. MYFDIC.GOV. 900 IN NS 193.108.152.143. MYFDIC.GOV. 900 IN NS 23.207.197.166. MYFDIC.GOV. 900 IN NS 104.122.95.88. MYFDIC.GOV. 900 IN NS 23.14.128.185. MYFDIC.GOV. 900 IN NS 23.73.134.237. MYFDIC.GOV. 900 IN NS a28-65.akam.net. MYFDIC.GOV. 900 IN NS 23.73.134.141. MYFDIC.GOV. 900 IN NS 193.108.155.34. MYFDIC.GOV. 900 IN NS 23.73.133.141. MYFDIC.GOV. 900 IN NS a10-66.akam.net. MYFDIC.GOV. 900 IN NS 72.246.0.10. MYFDIC.GOV. 900 IN NS 72.246.192.168. MYFDIC.GOV. 900 IN NS a1-55.akam.net. MYFDIC.GOV. 900 IN NS 104.107.116.17. MYFDIC.GOV. 900 IN NS a13-67.akam.net. MYFDIC.GOV. 900 IN RRSIG ( NS 8 2 900 20210121085450 20210117085321 29724 myfdic.gov. k7j1vzx5KHm1Vn3ldBh/CEKI22e6T191ogF7NlZILouWYJC8XhiH464U5ISmCi3n1aCzgpz+r8Yu FH9/kiERTk+14nBjrzD7O7vVjkYOYTYMBe104xqNo0v14mWH1uiyIyizP/odTi8aGRnETvdCPF+e IuSHz3f1jqpm8v7RqEE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a10-66.akam.net for MYFDIC.GOV/SOA
	Received 1000 bytes from 96.7.50.66
	;; Answer received from 96.7.50.66 (1000 bytes) ;; HEADER SECTION ;; id = 32147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 23 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN SOA ;; ANSWER SECTION (2 records) MYFDIC.GOV. 900 IN SOA ( dfwcnsgms01.fdic.GOV. unixops.fdic.GOV. 2008471592 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) MYFDIC.GOV. 900 IN RRSIG ( SOA 8 2 900 20210121095321 20210117085321 29724 myfdic.gov. Rq4tYYBXvqgpa6ghvPwLa84AMO4s9MOG9zwdmJ9UrSiN8zy8FkMRwtrodJIjwjbZfWNxlo36lGzQ Q3v27/gBCjRvW2iZDI/zUWDSk+PYhTbX/FmPu1UBaAV+fJPnvaPx+XfGoD+ruh3VoPUCtEFw10kn C1Jc7oZNK+OlO2+xUgE= ) ;; AUTHORITY SECTION (23 records) MYFDIC.GOV. 900 IN NS 72.246.0.10. MYFDIC.GOV. 900 IN NS 23.205.121.134. MYFDIC.GOV. 900 IN NS 193.108.152.143. MYFDIC.GOV. 900 IN NS a28-65.akam.net. MYFDIC.GOV. 900 IN NS 193.108.155.34. MYFDIC.GOV. 900 IN NS 72.246.192.168. MYFDIC.GOV. 900 IN NS a1-55.akam.net. MYFDIC.GOV. 900 IN NS a10-66.akam.net. MYFDIC.GOV. 900 IN NS 23.14.128.185. MYFDIC.GOV. 900 IN NS 60.254.128.45. MYFDIC.GOV. 900 IN NS 23.73.134.237. MYFDIC.GOV. 900 IN NS a18-64.akam.net. MYFDIC.GOV. 900 IN NS 23.207.197.166. MYFDIC.GOV. 900 IN NS 2.18.25.37. MYFDIC.GOV. 900 IN NS 104.107.116.17. MYFDIC.GOV. 900 IN NS a13-67.akam.net. MYFDIC.GOV. 900 IN NS 23.73.133.237. MYFDIC.GOV. 900 IN NS 72.247.124.98. MYFDIC.GOV. 900 IN NS a9-66.akam.net. MYFDIC.GOV. 900 IN NS 23.73.134.141. MYFDIC.GOV. 900 IN NS 104.122.95.88. MYFDIC.GOV. 900 IN NS 23.73.133.141. MYFDIC.GOV. 900 IN RRSIG ( NS 8 2 900 20210121085450 20210117085321 29724 myfdic.gov. k7j1vzx5KHm1Vn3ldBh/CEKI22e6T191ogF7NlZILouWYJC8XhiH464U5ISmCi3n1aCzgpz+r8Yu FH9/kiERTk+14nBjrzD7O7vVjkYOYTYMBe104xqNo0v14mWH1uiyIyizP/odTi8aGRnETvdCPF+e IuSHz3f1jqpm8v7RqEE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a9-66.akam.net for MYFDIC.GOV/SOA
	Received 1000 bytes from 184.85.248.66
	;; Answer received from 184.85.248.66 (1000 bytes) ;; HEADER SECTION ;; id = 38790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 23 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN SOA ;; ANSWER SECTION (2 records) MYFDIC.GOV. 900 IN SOA ( dfwcnsgms01.fdic.GOV. unixops.fdic.GOV. 2008471592 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) MYFDIC.GOV. 900 IN RRSIG ( SOA 8 2 900 20210121095321 20210117085321 29724 myfdic.gov. Rq4tYYBXvqgpa6ghvPwLa84AMO4s9MOG9zwdmJ9UrSiN8zy8FkMRwtrodJIjwjbZfWNxlo36lGzQ Q3v27/gBCjRvW2iZDI/zUWDSk+PYhTbX/FmPu1UBaAV+fJPnvaPx+XfGoD+ruh3VoPUCtEFw10kn C1Jc7oZNK+OlO2+xUgE= ) ;; AUTHORITY SECTION (23 records) MYFDIC.GOV. 900 IN NS 23.73.133.237. MYFDIC.GOV. 900 IN NS 23.73.134.141. MYFDIC.GOV. 900 IN NS 72.246.192.168. MYFDIC.GOV. 900 IN NS 104.122.95.88. MYFDIC.GOV. 900 IN NS a10-66.akam.net. MYFDIC.GOV. 900 IN NS a9-66.akam.net. MYFDIC.GOV. 900 IN NS 193.108.155.34. MYFDIC.GOV. 900 IN NS a1-55.akam.net. MYFDIC.GOV. 900 IN NS 72.247.124.98. MYFDIC.GOV. 900 IN NS 23.73.133.141. MYFDIC.GOV. 900 IN NS 23.207.197.166. MYFDIC.GOV. 900 IN NS 193.108.152.143. MYFDIC.GOV. 900 IN NS 60.254.128.45. MYFDIC.GOV. 900 IN NS 104.107.116.17. MYFDIC.GOV. 900 IN NS a18-64.akam.net. MYFDIC.GOV. 900 IN NS a28-65.akam.net. MYFDIC.GOV. 900 IN NS 23.14.128.185. MYFDIC.GOV. 900 IN NS 23.205.121.134. MYFDIC.GOV. 900 IN NS 23.73.134.237. MYFDIC.GOV. 900 IN NS 2.18.25.37. MYFDIC.GOV. 900 IN NS 72.246.0.10. MYFDIC.GOV. 900 IN NS a13-67.akam.net. MYFDIC.GOV. 900 IN RRSIG ( NS 8 2 900 20210121085450 20210117085321 29724 myfdic.gov. k7j1vzx5KHm1Vn3ldBh/CEKI22e6T191ogF7NlZILouWYJC8XhiH464U5ISmCi3n1aCzgpz+r8Yu FH9/kiERTk+14nBjrzD7O7vVjkYOYTYMBe104xqNo0v14mWH1uiyIyizP/odTi8aGRnETvdCPF+e IuSHz3f1jqpm8v7RqEE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a18-64.akam.net for MYFDIC.GOV/SOA
	Received 1000 bytes from 95.101.36.64
	;; Answer received from 95.101.36.64 (1000 bytes) ;; HEADER SECTION ;; id = 16479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 23 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN SOA ;; ANSWER SECTION (2 records) MYFDIC.GOV. 900 IN SOA ( dfwcnsgms01.fdic.GOV. unixops.fdic.GOV. 2008471592 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) MYFDIC.GOV. 900 IN RRSIG ( SOA 8 2 900 20210121095321 20210117085321 29724 myfdic.gov. Rq4tYYBXvqgpa6ghvPwLa84AMO4s9MOG9zwdmJ9UrSiN8zy8FkMRwtrodJIjwjbZfWNxlo36lGzQ Q3v27/gBCjRvW2iZDI/zUWDSk+PYhTbX/FmPu1UBaAV+fJPnvaPx+XfGoD+ruh3VoPUCtEFw10kn C1Jc7oZNK+OlO2+xUgE= ) ;; AUTHORITY SECTION (23 records) MYFDIC.GOV. 900 IN NS 23.205.121.134. MYFDIC.GOV. 900 IN NS 23.73.133.237. MYFDIC.GOV. 900 IN NS 104.107.116.17. MYFDIC.GOV. 900 IN NS 72.246.192.168. MYFDIC.GOV. 900 IN NS 72.246.0.10. MYFDIC.GOV. 900 IN NS a10-66.akam.net. MYFDIC.GOV. 900 IN NS 23.207.197.166. MYFDIC.GOV. 900 IN NS 23.73.133.141. MYFDIC.GOV. 900 IN NS a9-66.akam.net. MYFDIC.GOV. 900 IN NS a13-67.akam.net. MYFDIC.GOV. 900 IN NS 193.108.152.143. MYFDIC.GOV. 900 IN NS 2.18.25.37. MYFDIC.GOV. 900 IN NS 193.108.155.34. MYFDIC.GOV. 900 IN NS 60.254.128.45. MYFDIC.GOV. 900 IN NS a1-55.akam.net. MYFDIC.GOV. 900 IN NS 23.73.134.237. MYFDIC.GOV. 900 IN NS a18-64.akam.net. MYFDIC.GOV. 900 IN NS 72.247.124.98. MYFDIC.GOV. 900 IN NS 23.73.134.141. MYFDIC.GOV. 900 IN NS a28-65.akam.net. MYFDIC.GOV. 900 IN NS 104.122.95.88. MYFDIC.GOV. 900 IN NS 23.14.128.185. MYFDIC.GOV. 900 IN RRSIG ( NS 8 2 900 20210121085450 20210117085321 29724 myfdic.gov. k7j1vzx5KHm1Vn3ldBh/CEKI22e6T191ogF7NlZILouWYJC8XhiH464U5ISmCi3n1aCzgpz+r8Yu FH9/kiERTk+14nBjrzD7O7vVjkYOYTYMBe104xqNo0v14mWH1uiyIyizP/odTi8aGRnETvdCPF+e IuSHz3f1jqpm8v7RqEE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a1-55.akam.net for MYFDIC.GOV/SOA
	Received 1000 bytes from 193.108.91.55
	;; Answer received from 193.108.91.55 (1000 bytes) ;; HEADER SECTION ;; id = 60292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 23 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN SOA ;; ANSWER SECTION (2 records) MYFDIC.GOV. 900 IN SOA ( dfwcnsgms01.fdic.GOV. unixops.fdic.GOV. 2008471592 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) MYFDIC.GOV. 900 IN RRSIG ( SOA 8 2 900 20210121095321 20210117085321 29724 myfdic.gov. Rq4tYYBXvqgpa6ghvPwLa84AMO4s9MOG9zwdmJ9UrSiN8zy8FkMRwtrodJIjwjbZfWNxlo36lGzQ Q3v27/gBCjRvW2iZDI/zUWDSk+PYhTbX/FmPu1UBaAV+fJPnvaPx+XfGoD+ruh3VoPUCtEFw10kn C1Jc7oZNK+OlO2+xUgE= ) ;; AUTHORITY SECTION (23 records) MYFDIC.GOV. 900 IN NS a1-55.akam.net. MYFDIC.GOV. 900 IN NS 23.73.134.237. MYFDIC.GOV. 900 IN NS 23.73.133.141. MYFDIC.GOV. 900 IN NS 60.254.128.45. MYFDIC.GOV. 900 IN NS 72.246.0.10. MYFDIC.GOV. 900 IN NS 72.247.124.98. MYFDIC.GOV. 900 IN NS a10-66.akam.net. MYFDIC.GOV. 900 IN NS 193.108.152.143. MYFDIC.GOV. 900 IN NS 2.18.25.37. MYFDIC.GOV. 900 IN NS 23.73.134.141. MYFDIC.GOV. 900 IN NS 104.107.116.17. MYFDIC.GOV. 900 IN NS a9-66.akam.net. MYFDIC.GOV. 900 IN NS 23.205.121.134. MYFDIC.GOV. 900 IN NS a18-64.akam.net. MYFDIC.GOV. 900 IN NS 23.73.133.237. MYFDIC.GOV. 900 IN NS 23.207.197.166. MYFDIC.GOV. 900 IN NS a13-67.akam.net. MYFDIC.GOV. 900 IN NS 23.14.128.185. MYFDIC.GOV. 900 IN NS 193.108.155.34. MYFDIC.GOV. 900 IN NS 104.122.95.88. MYFDIC.GOV. 900 IN NS a28-65.akam.net. MYFDIC.GOV. 900 IN NS 72.246.192.168. MYFDIC.GOV. 900 IN RRSIG ( NS 8 2 900 20210121085450 20210117085321 29724 myfdic.gov. k7j1vzx5KHm1Vn3ldBh/CEKI22e6T191ogF7NlZILouWYJC8XhiH464U5ISmCi3n1aCzgpz+r8Yu FH9/kiERTk+14nBjrzD7O7vVjkYOYTYMBe104xqNo0v14mWH1uiyIyizP/odTi8aGRnETvdCPF+e IuSHz3f1jqpm8v7RqEE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a10-66.akam.net for MYFDIC.GOV/A
	Received 521 bytes from 96.7.50.66
	;; Answer received from 96.7.50.66 (521 bytes) ;; HEADER SECTION ;; id = 50106 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYFDIC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) prhst3k8ubsb2b0bfe7h43cj84abs7r3.MYFDIC.GOV. 900 IN NSEC3 ( 1 0 10 0e sid2pqrk9ddpdc26k7reo0hp5mbjpkjg NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) prhst3k8ubsb2b0bfe7h43cj84abs7r3.MYFDIC.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210120193024 20210116191141 29724 myfdic.gov. idQxaqN1gZL/AOtkqrtKD7IakI1lIRQS/H1wQata2RauSuYVQKqGCgDLyjJ/lN8OSJNBANk6ltrM r+5d+FsiE3QUYl8mGbX7sgXiZv/ljPHLB8d2F9KYjIiFHzWSDh0gV1roIy3asn8v3MCdzdwt1KSC ctsvZ15ov/X6K+81WmA= ) MYFDIC.GOV. 900 IN SOA ( dfwcnsgms01.fdic.GOV. unixops.fdic.GOV. 2008471592 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) MYFDIC.GOV. 900 IN RRSIG ( SOA 8 2 900 20210121095321 20210117085321 29724 myfdic.gov. Rq4tYYBXvqgpa6ghvPwLa84AMO4s9MOG9zwdmJ9UrSiN8zy8FkMRwtrodJIjwjbZfWNxlo36lGzQ Q3v27/gBCjRvW2iZDI/zUWDSk+PYhTbX/FmPu1UBaAV+fJPnvaPx+XfGoD+ruh3VoPUCtEFw10kn C1Jc7oZNK+OlO2+xUgE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`MYFDIC.GOV. 900 IN RRSIG ( SOA 8 2 900 20210121095321 20210117085321 29724 myfdic.gov. Rq4tYYBXvqgpa6ghvPwLa84AMO4s9MOG9zwdmJ9UrSiN8zy8FkMRwtrodJIjwjbZfWNxlo36lGzQ Q3v27/gBCjRvW2iZDI/zUWDSk+PYhTbX/FmPu1UBaAV+fJPnvaPx+XfGoD+ruh3VoPUCtEFw10kn C1Jc7oZNK+OlO2+xUgE= )`
	RRSIG=29724 and DNSKEY=29724 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MYFDIC.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: