DNSSEC Analyzer - MYMONEY.GOV

Domain Name:

Time: 2021-01-15 23:14:33 UTC, NTP stratum 4

Analyzing DNSSEC problems for MYMONEY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 59216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to m.root-servers.net for MYMONEY.GOV/A
	Received 669 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (669 bytes) ;; HEADER SECTION ;; id = 108 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (661 bytes) ;; HEADER SECTION ;; id = 29653 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 406 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (406 bytes) ;; HEADER SECTION ;; id = 14903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (957 bytes) ;; HEADER SECTION ;; id = 19280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=15489 is now in the chain-of-trust
	Query to d.gov-servers.net for MYMONEY.GOV/A
	Received 452 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (452 bytes) ;; HEADER SECTION ;; id = 36959 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) MYMONEY.GOV. 86400 IN NS ns1.treasury.GOV. MYMONEY.GOV. 86400 IN NS ns3.treasury.GOV. MYMONEY.GOV. 3600 IN DS ( 37563 7 2 5c17e96dc9afb01cb54d4f0da8ceb8589d529f0a201bd933d13d1da941b8ca7b ) MYMONEY.GOV. 3600 IN DS 37563 7 1 cea5e7eb0114d9b83aaa1b6e50317c398d147140 MYMONEY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. Q/QJbGLCFQ+VBzg9Iao3dtP9vOqBH8OgJTWZKkx/kkror0xc1b6wq0+rmeefrpauY9DgFsx8+H1h sXBAxLxbNlP3bf/t9f/+xZ/FuuYuBue6nzphwINleUhZv4a6ps+zpv8tB31C7wjesGZB5fgO7NAO l53C0GOL6Y5HVjB6cvOgeE7TPQ/r1OLXo7p1n1c5Jt0GW7x9iYzrCSKHs/rH3Q== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for MYMONEY.GOV/DNSKEY
	Received 452 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (452 bytes) ;; HEADER SECTION ;; id = 5526 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) MYMONEY.GOV. 86400 IN NS ns1.treasury.GOV. MYMONEY.GOV. 86400 IN NS ns3.treasury.GOV. MYMONEY.GOV. 3600 IN DS ( 37563 7 2 5c17e96dc9afb01cb54d4f0da8ceb8589d529f0a201bd933d13d1da941b8ca7b ) MYMONEY.GOV. 3600 IN DS 37563 7 1 cea5e7eb0114d9b83aaa1b6e50317c398d147140 MYMONEY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. Q/QJbGLCFQ+VBzg9Iao3dtP9vOqBH8OgJTWZKkx/kkror0xc1b6wq0+rmeefrpauY9DgFsx8+H1h sXBAxLxbNlP3bf/t9f/+xZ/FuuYuBue6nzphwINleUhZv4a6ps+zpv8tB31C7wjesGZB5fgO7NAO l53C0GOL6Y5HVjB6cvOgeE7TPQ/r1OLXo7p1n1c5Jt0GW7x9iYzrCSKHs/rH3Q== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MYMONEY.GOV

MYMONEY.GOV

	Checking DS between GOV and MYMONEY.GOV
	Query to c.gov-servers.net for MYMONEY.GOV/DS
	Received 319 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (319 bytes) ;; HEADER SECTION ;; id = 44787 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN DS ;; ANSWER SECTION (3 records) MYMONEY.GOV. 3600 IN DS ( 37563 7 2 5c17e96dc9afb01cb54d4f0da8ceb8589d529f0a201bd933d13d1da941b8ca7b ) MYMONEY.GOV. 3600 IN DS 37563 7 1 cea5e7eb0114d9b83aaa1b6e50317c398d147140 MYMONEY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. Q/QJbGLCFQ+VBzg9Iao3dtP9vOqBH8OgJTWZKkx/kkror0xc1b6wq0+rmeefrpauY9DgFsx8+H1h sXBAxLxbNlP3bf/t9f/+xZ/FuuYuBue6nzphwINleUhZv4a6ps+zpv8tB31C7wjesGZB5fgO7NAO l53C0GOL6Y5HVjB6cvOgeE7TPQ/r1OLXo7p1n1c5Jt0GW7x9iYzrCSKHs/rH3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for MYMONEY.GOV in the GOV zone
	DS=37563/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=37563/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`MYMONEY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. Q/QJbGLCFQ+VBzg9Iao3dtP9vOqBH8OgJTWZKkx/kkror0xc1b6wq0+rmeefrpauY9DgFsx8+H1h sXBAxLxbNlP3bf/t9f/+xZ/FuuYuBue6nzphwINleUhZv4a6ps+zpv8tB31C7wjesGZB5fgO7NAO l53C0GOL6Y5HVjB6cvOgeE7TPQ/r1OLXo7p1n1c5Jt0GW7x9iYzrCSKHs/rH3Q== )`
	RRSIG=27306 and DNSKEY=27306 verifies the DS RRset
	DS=37563/SHA-256 is now in the chain-of-trust
	`MYMONEY.GOV. 3600 IN DS ( 37563 7 2 5c17e96dc9afb01cb54d4f0da8ceb8589d529f0a201bd933d13d1da941b8ca7b )`
	`MYMONEY.GOV. 3600 IN DS 37563 7 1 cea5e7eb0114d9b83aaa1b6e50317c398d147140`
	Query to ns3.treasury.GOV for MYMONEY.GOV/DNSKEY
	Received 678 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (678 bytes) ;; HEADER SECTION ;; id = 44190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) MYMONEY.GOV. 300 IN DNSKEY ( 256 3 7 AwEAAbRzUD6hCVpHr3GnHaobRWMlK8+xlTGGZ8nG8hBQV0wP6SU1rrnBftgKAsYvrW5gyucnNdin 9DI3+vONnhiWC6eR2lmTo+8AbmDLTZvw0Y1tt3shb1uSANRH23u0nnzX/hJXk5tJ8Fyzw6NjaW+a 2cJdZUr/IUevHqI/XR2dWJJz ) ; Key ID = 8294 MYMONEY.GOV. 300 IN DNSKEY ( 257 3 7 AwEAAbvv7DQxljHMKI7dO/aOVhl+PfcNtY1w7hfsAA/gb51GL/zG2ZsJSwiQZyHvZdh2NIP7zYf0 eomwpi0JzpxPCEwD9qA1j2BBW2cIzWg+eav+xSe6vzK62qDzYP4OLKABRMx6Z8Q9ETXC7jnBgWZO ddp7zLKrB1sryOYDA0W/SO8h ) ; Key ID = 37563 MYMONEY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20210122225953 20210115215953 8294 mymoney.gov. VbO39eM5x/pjvriznunq+BQe6XlPVwXgvRWErlZt8Fpjb4Tup4aMFJEHa/O7/9+zzxSADZ1VNS8X RYu5AEGCos2GcZKdCk4MoMZ9EKGHrGpmTXVs5eG9EQZkexduKKUAg0trYJ4cqchC/fyfPZ7tZXIJ dclQ5mfrGFhrkPbUnUo= ) MYMONEY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20210122225953 20210115215953 37563 mymoney.gov. UIb75FEl0b3WtDchO3+H1nE3SXZz+zrb5eNkCBqRxha5sLSzIBej4+fGxmX6ltJ7q+FmLsGzI75o VmX8vB4VIgGCrrRN48/GNc++zoEMAd+qb4An5MxBN+1Nr7+8kTDXmxpN3xODl0f7kgCHZ7R0wlyq J2ww3N4f6UugQdTyklo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for MYMONEY.GOV
	`MYMONEY.GOV. 300 IN DNSKEY ( 256 3 7 AwEAAbRzUD6hCVpHr3GnHaobRWMlK8+xlTGGZ8nG8hBQV0wP6SU1rrnBftgKAsYvrW5gyucnNdin 9DI3+vONnhiWC6eR2lmTo+8AbmDLTZvw0Y1tt3shb1uSANRH23u0nnzX/hJXk5tJ8Fyzw6NjaW+a 2cJdZUr/IUevHqI/XR2dWJJz ) ; Key ID = 8294`
	`MYMONEY.GOV. 300 IN DNSKEY ( 257 3 7 AwEAAbvv7DQxljHMKI7dO/aOVhl+PfcNtY1w7hfsAA/gb51GL/zG2ZsJSwiQZyHvZdh2NIP7zYf0 eomwpi0JzpxPCEwD9qA1j2BBW2cIzWg+eav+xSe6vzK62qDzYP4OLKABRMx6Z8Q9ETXC7jnBgWZO ddp7zLKrB1sryOYDA0W/SO8h ) ; Key ID = 37563`
	DNSKEY=37563/SEP is now in the chain-of-trust
	DS=37563/SHA-256 verifies DNSKEY=37563/SEP
	DS=37563/SHA-1 verifies DNSKEY=37563/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MYMONEY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20210122225953 20210115215953 8294 mymoney.gov. VbO39eM5x/pjvriznunq+BQe6XlPVwXgvRWErlZt8Fpjb4Tup4aMFJEHa/O7/9+zzxSADZ1VNS8X RYu5AEGCos2GcZKdCk4MoMZ9EKGHrGpmTXVs5eG9EQZkexduKKUAg0trYJ4cqchC/fyfPZ7tZXIJ dclQ5mfrGFhrkPbUnUo= )`
	`MYMONEY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20210122225953 20210115215953 37563 mymoney.gov. UIb75FEl0b3WtDchO3+H1nE3SXZz+zrb5eNkCBqRxha5sLSzIBej4+fGxmX6ltJ7q+FmLsGzI75o VmX8vB4VIgGCrrRN48/GNc++zoEMAd+qb4An5MxBN+1Nr7+8kTDXmxpN3xODl0f7kgCHZ7R0wlyq J2ww3N4f6UugQdTyklo= )`
	RRSIG=8294 and DNSKEY=8294 verifies the DNSKEY RRset
	RRSIG=37563 and DNSKEY=37563/SEP verifies the DNSKEY RRset
	DNSKEY=8294 is now in the chain-of-trust
	Query to ns3.treasury.GOV for MYMONEY.GOV/A
	Received 227 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (227 bytes) ;; HEADER SECTION ;; id = 62265 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN A ;; ANSWER SECTION (2 records) MYMONEY.GOV. 2 IN A 166.123.218.220 MYMONEY.GOV. 2 IN RRSIG ( A 7 2 2 20210122224952 20210115214952 8294 mymoney.gov. qqho4mJy3SAVsXTwA0L91nXUFCzscKP5nQA0KwQZId/CCccw6q10Th80CHQNv2SV7ojS8s7H0Ynf gvSTnJ89Yy1GzUSDHE4DPrd4fsfL+OAk4SlUTphI/3I/kIUCDxqIlhsRF7LnKIF491jv1z8zWevg U+3g/XTzc/AKxveq8uI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MYMONEY.GOV is authoritative for MYMONEY.GOV
	Found RRSIG signed by mymoney.gov zone
	Query to ns3.treasury.GOV for MYMONEY.GOV/SOA
	Received 1258 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1258 bytes) ;; HEADER SECTION ;; id = 13106 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN SOA ;; ANSWER SECTION (2 records) MYMONEY.GOV. 28800 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 998 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) MYMONEY.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20210120132613 20210113122613 8294 mymoney.gov. LCYVCIY8V1BdANcIFOgFcuxM34wts62CClgqqvExAgGvhmYxvcM2m6pblxG0E5ukB9c/wajdc1f5 /y6jpLtnjbVPdWbwVYZFT0IcvkKhnEVaaseTd67pTJefX0O29x5PDPxqliUcz6fdOzwBOwMsgkHf fxj0kr4JTn+Tl59gJhA= ) ;; AUTHORITY SECTION (3 records) MYMONEY.GOV. 28800 IN NS ns1.treasury.GOV. MYMONEY.GOV. 28800 IN NS ns3.treasury.GOV. MYMONEY.GOV. 28800 IN RRSIG ( NS 7 2 28800 20210122141625 20210115131625 8294 mymoney.gov. VNHuOVqkRUt6rPTRQUxAW3loe28b7x8Fzi6g3QjnGXioDt1Xl3gQxoi+d7wwCVTB9OemZoyNFdf5 Z0XR5JJbQrpZCCHQlmk7QnO+RA7GFAw96TvymWw5knGfBEWj8+cONMPXZrlsg87ZcZyEqIlowDja C9pmy7/Cpf+vzvCdNWk= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20210122135258 20210115125258 27329 treasury.gov. VeziP83WzGj4xapxEWpKKDG9vIT3Tz7IBafRylhc3CtQxFOiyWBSMb8nG2Yh/GBfI4cd8QU8BI0m b9Y09VC4lO5DmsCNT7wUotJ4+iRkbBlq8z1gOv+56j/wouQMkuGwGN5HsTQfG1fQL7qihVq8QKzv prGLserAqI3NEtemfqM= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20210122144147 20210115134147 27329 treasury.gov. jhrCyBXlv4JK2OI0dwW6juHu1WZT92x0rYCJgxYWnI+B8Ai2+ZW8An0QykfMQSlMMYp3qkXeRjZg g64q1L1MSlV2Ud6v8ryZTtqQS8XK9Ex0ZQLDcfMsim6K+UGX1hcfjjHdotafZBQRsUmOjRW4MIQ+ ncbnzISSv09dEnXRkCE= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20210122220926 20210115210926 27329 treasury.gov. gwM3RrS9jvf5MqFgRO/1tKohOoJu6ue5gSYfRg9fQDejQZAAHIszszcbY2EirV7DDz1DAT6HCkQE vCehNnyEtQW3oGQugvWD8ufybPh0p8JCgy9c3M/7JQ/k2DX1hdO34WuGsc7ReMlNdRARHMPXxysI S8gDibcyFYrgTRNtNXY= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20210122231138 20210115221138 27329 treasury.gov. Uj/A8ke01Ywvy87dGBGw63akHxQkWBN3bjDx/m0g6uSF8eI+c6w1y7MRPSBgFTP9tL3SVsGNEsKq 1u6hyHbAXtZYFgFZnbQRftKKj34x60VkC9XiDACv5Qwdw6jOzuEyqT4eYLw801GF9ddBMxtrU1Cp 4ymPCDfjCHfEDzGhMog= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for MYMONEY.GOV/SOA
	Received 1258 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1258 bytes) ;; HEADER SECTION ;; id = 30295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN SOA ;; ANSWER SECTION (2 records) MYMONEY.GOV. 28800 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 1005 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) MYMONEY.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20210122231433 20210115221433 8294 mymoney.gov. jXNs3KIJp9NRYH7nqwPv130P6+QZdlbZr+2g3NO2Kk+1V/aStCy1qC2vx1P4fGy/4WVn08oIys4I q/9kXt2Q5+ieMeobIbADWBS8txDJuPHuxCSuXu87zCNSx9hrdZ1IGG3gOvgtYRPOHaOzG5wWte7j Fxcxr3SF8Ujddo3+5ck= ) ;; AUTHORITY SECTION (3 records) MYMONEY.GOV. 28800 IN NS ns3.treasury.GOV. MYMONEY.GOV. 28800 IN NS ns1.treasury.GOV. MYMONEY.GOV. 28800 IN RRSIG ( NS 7 2 28800 20210122172728 20210115162728 8294 mymoney.gov. BBacCKIUStk+24+AcC66OE7Te/BiI+lf5of0czfhBNRvXYX5AJ2CJMQ3Dt442CXPuJy1HsrC/1g3 ySQJLRXoOZG8eoaxSHxv/SjpeSU05EHN1drGvGcF6XwbrTZt2PcAxHL2rkFSS68Yb5lyui0r6u+6 aFGToJvI1PD5EV2QAcs= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20210122140131 20210115130131 27329 treasury.gov. B//JvdugzSweBl284K0Do/R0ih3yfMW8v9/bMgT7ywui+VM3sTT29ZHdI6ukMr9olyehSvJCxM++ OB2ombD7g3yi7735uBrsX5FDw5hFOyuNqE8oOuo/rqpMH08xOAru8tDZZso2Y+L7kkTBnh4d4H3d RmkmYMh3ZVkAd4gQXVY= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20210122191037 20210115181037 27329 treasury.gov. bS7XmlPwkyY1G3vz0sjmjrVtLrpxpn/4XXdTejsDkpCtSZpx9n6Fc8UXcNE5mP3U/bdqz6XunDhi ohR/VIC1EatX516BoVmuxmCL3XqCEvplxK5KzbTgUnVzGXjDwJaWNEV4YMTClGNVcuK5eNPXd8zu ztUS/U5fo6WYV5q9G5E= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20210122202912 20210115192912 27329 treasury.gov. Ii/JlHjyW6YjkJEmb8nEXVHoqX608x1BTCI+qbSHGXFByKTzYYcPcCzUSF0gL49Iwx3lQb6v7pIV othUkzpBXlitCX5Rtnv3mRq5sgPg0OSMvMqfa8DHuVGLlN2Eynfhsjwn47MaX5fi/Iy9Ob4SejFc PTYUow4WJD/EWgQsMVE= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20210122194236 20210115184236 27329 treasury.gov. UW0uD4jgvy5Kyxcrpeud+GCmp/Ijg+oOKRzHdPJShFw11ftqaC2IHkdfYPvIgGmWJA8qGqaIiarF 8z1TUPqs/tPpU68o8TvsiW0SUaTmZoJXRHJh2kucDKQI1IT2dwFds6GW/fSNNWdGZi5PO3rmAdzF lmqym9+yaB2QzAxcjYw= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.treasury.GOV serial (1005) differs from ns3.treasury.GOV serial (998)
	Query to ns3.treasury.GOV for MYMONEY.GOV/A
	Received 227 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (227 bytes) ;; HEADER SECTION ;; id = 1345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN A ;; ANSWER SECTION (2 records) MYMONEY.GOV. 2 IN A 166.123.218.220 MYMONEY.GOV. 2 IN RRSIG ( A 7 2 2 20210120134406 20210113124406 8294 mymoney.gov. ic7jCrmljzDMWb1GDblfd3MOR9jYKPcpnSOF9IKwyA9xu3HyanT1Yg6XS5jYYJhaHb+v0bzNH/6q n8k1wJAjOjBy4PS+sALHxXG5GFLKPo6hrUZEhf3/aQnBs6zFiv89HYqZqccjBClkuoO9JCHznaz/ C6rou7WeuP/sMA4DC38= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MYMONEY.GOV A RR has value 166.123.218.220
	Found 1 RRSIGs over A RRset
	`MYMONEY.GOV. 2 IN RRSIG ( A 7 2 2 20210120134406 20210113124406 8294 mymoney.gov. ic7jCrmljzDMWb1GDblfd3MOR9jYKPcpnSOF9IKwyA9xu3HyanT1Yg6XS5jYYJhaHb+v0bzNH/6q n8k1wJAjOjBy4PS+sALHxXG5GFLKPo6hrUZEhf3/aQnBs6zFiv89HYqZqccjBClkuoO9JCHznaz/ C6rou7WeuP/sMA4DC38= )`
	RRSIG=8294 and DNSKEY=8294 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MYMONEY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: