DNSSEC Analyzer - MYMONEY.GOV

Domain Name:

Time: 2020-01-26 04:58:24 UTC, NTP stratum 4

Analyzing DNSSEC problems for MYMONEY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 40553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to b.root-servers.net for MYMONEY.GOV/A
	Received 669 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (669 bytes) ;; HEADER SECTION ;; id = 27752 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (658 bytes) ;; HEADER SECTION ;; id = 41767 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 33942 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to d.gov-servers.net for GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to d.gov-servers.net for MYMONEY.GOV/A
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for MYMONEY.GOV/A: 'IPv6 transport disabled'
	Received 452 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (452 bytes) ;; HEADER SECTION ;; id = 63301 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) MYMONEY.GOV. 86400 IN NS ns3.treasury.GOV. MYMONEY.GOV. 86400 IN NS ns1.treasury.GOV. MYMONEY.GOV. 3600 IN DS 11328 7 1 79044c653c9a35e4a172ef851c30137cb15c2ba5 MYMONEY.GOV. 3600 IN DS ( 11328 7 2 4a4e9f1dbc10af43e74a493169bf1a69056872665b3bf71a580e5bec9713e466 ) MYMONEY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. GU6gn9/XQCtMYQGM9s5+nBTKHlM8bGW61jzR4YckzRUG0C8uRiueRGUv9QS5qNL5EFquswXOIKQA EMg7E7ILLjutMtH6ZAF3uRN1ihi6L6XI//ESw+lzzldkOk+5e93bruvXPD9vM9x2mO3ZeCwvE0Qj A610G8/6FjkkFSrNlh/oK3PzhGkA72Ty0sKv/CI/sy7n9T6GF0Ixjg4sV/Jz1Q== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for MYMONEY.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for MYMONEY.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 452 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (452 bytes) ;; HEADER SECTION ;; id = 10039 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) MYMONEY.GOV. 86400 IN NS ns3.treasury.GOV. MYMONEY.GOV. 86400 IN NS ns1.treasury.GOV. MYMONEY.GOV. 3600 IN DS 11328 7 1 79044c653c9a35e4a172ef851c30137cb15c2ba5 MYMONEY.GOV. 3600 IN DS ( 11328 7 2 4a4e9f1dbc10af43e74a493169bf1a69056872665b3bf71a580e5bec9713e466 ) MYMONEY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. GU6gn9/XQCtMYQGM9s5+nBTKHlM8bGW61jzR4YckzRUG0C8uRiueRGUv9QS5qNL5EFquswXOIKQA EMg7E7ILLjutMtH6ZAF3uRN1ihi6L6XI//ESw+lzzldkOk+5e93bruvXPD9vM9x2mO3ZeCwvE0Qj A610G8/6FjkkFSrNlh/oK3PzhGkA72Ty0sKv/CI/sy7n9T6GF0Ixjg4sV/Jz1Q== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MYMONEY.GOV

MYMONEY.GOV

	Checking DS between GOV and MYMONEY.GOV
	Query to c.gov-servers.net for MYMONEY.GOV/DS
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for MYMONEY.GOV/DS: 'IPv6 transport disabled'
	Received 319 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (319 bytes) ;; HEADER SECTION ;; id = 28475 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN DS ;; ANSWER SECTION (3 records) MYMONEY.GOV. 3600 IN DS 11328 7 1 79044c653c9a35e4a172ef851c30137cb15c2ba5 MYMONEY.GOV. 3600 IN DS ( 11328 7 2 4a4e9f1dbc10af43e74a493169bf1a69056872665b3bf71a580e5bec9713e466 ) MYMONEY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. GU6gn9/XQCtMYQGM9s5+nBTKHlM8bGW61jzR4YckzRUG0C8uRiueRGUv9QS5qNL5EFquswXOIKQA EMg7E7ILLjutMtH6ZAF3uRN1ihi6L6XI//ESw+lzzldkOk+5e93bruvXPD9vM9x2mO3ZeCwvE0Qj A610G8/6FjkkFSrNlh/oK3PzhGkA72Ty0sKv/CI/sy7n9T6GF0Ixjg4sV/Jz1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for MYMONEY.GOV in the GOV zone
	DS=11328/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=11328/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`MYMONEY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. GU6gn9/XQCtMYQGM9s5+nBTKHlM8bGW61jzR4YckzRUG0C8uRiueRGUv9QS5qNL5EFquswXOIKQA EMg7E7ILLjutMtH6ZAF3uRN1ihi6L6XI//ESw+lzzldkOk+5e93bruvXPD9vM9x2mO3ZeCwvE0Qj A610G8/6FjkkFSrNlh/oK3PzhGkA72Ty0sKv/CI/sy7n9T6GF0Ixjg4sV/Jz1Q== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=11328/SHA-1 is now in the chain-of-trust
	`MYMONEY.GOV. 3600 IN DS 11328 7 1 79044c653c9a35e4a172ef851c30137cb15c2ba5`
	`MYMONEY.GOV. 3600 IN DS ( 11328 7 2 4a4e9f1dbc10af43e74a493169bf1a69056872665b3bf71a580e5bec9713e466 )`
	Query to ns1.treasury.GOV for MYMONEY.GOV/DNSKEY
	Received 997 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (997 bytes) ;; HEADER SECTION ;; id = 483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) MYMONEY.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAcyoJ/6eTtLBGQDILrGqWtivDvXfeE8apTPJvvQeu6zSsfcCpk6ynqJQSMTS/NuSvYoFTdgc DxxZoF7G+IVQjiUFuYjJbcKx1GOJgnkfGYoHHmouwadQIMQ7wkBw5C7ml98AJRzA5EJXMezMFWi9 MT3grqTFfLRwCjSsJovR5DHH ) ; Key ID = 11328 MYMONEY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAboNLy5kL5AzHsTrAmmMN328UFjf8FueWvojBMCbvBqkWQ57ehZM6urZhl25bo9zU8DU/9QM xKKAtqxYUXBV3uJcEZ51tGMG1XGwkcgzomhYeV5tY/u0JxRDNX00nmst0lf565TYOWp8Mwj5L2Xo 0gPaC/xD7qYfskV1JJtc9AGH ) ; Key ID = 10415 MYMONEY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAaIdr4Cud2VZXbXhDt73tjLL7onIODtoIL3w7oKE8mxft3bNOt4XRBtSQGROAHv0xHI9BuHi s5YS2bZ94ay/kFeMpyXxhC0DtgByKONNcwxUDlwZQF8ff/6RDEatSIR0jecyHrQkG6LCQvotdsUF xm6ADNnYuQO8edcEp7hyWKdB ) ; Key ID = 14090 MYMONEY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202004246 20200126004246 11328 mymoney.gov. Y2aMB94GmbqlT7qxkqGI4iWwvqjH7SgxDvlADZhP53ZeW4ylxctj7jhD7QvUlLxXAY7wIdX9FmZO o/eeqbA78PI4xOndlcLPuNJ98EjR6rg93puClKiQyg6VQMLSNBFytoQVVO37+1b9nRFcxEzmAfxX O5Q3MZPTkpDUS8rTU/c= ) MYMONEY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202004246 20200126004246 10415 mymoney.gov. e0EKLKPzt/1KtlWJdWTaFngrPH5bbC4zvoqSCgWxfX9ntdi3A/0h+/TFd1cCF+bFUB2kobnswBpp R49Y+2ABFhxwOAtvWhi0V14Z7RphIrnzmPn5WwwxOy1phL3qoemxlqCGHA0LWcATm92xpHtYqTfE UcumDkv517sXKmbaILc= ) MYMONEY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202004246 20200126004246 14090 mymoney.gov. UiL2FjAjVSykImZ+EVxJsIBu1/N2hqYl1L08oWGlb4e7ikkz8FeYJXrA512sSrPp2+MKldXmRtyr jAW8h4+Jhg+ejw9jZYCE2aSX/JQOC04VOa/nvIDC0OyiK5g4bDt/oFRr0f99DQuA6l1KxMPvllGo dvVIlW8QA92VhUSU4mk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for MYMONEY.GOV
	`MYMONEY.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAcyoJ/6eTtLBGQDILrGqWtivDvXfeE8apTPJvvQeu6zSsfcCpk6ynqJQSMTS/NuSvYoFTdgc DxxZoF7G+IVQjiUFuYjJbcKx1GOJgnkfGYoHHmouwadQIMQ7wkBw5C7ml98AJRzA5EJXMezMFWi9 MT3grqTFfLRwCjSsJovR5DHH ) ; Key ID = 11328`
	`MYMONEY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAboNLy5kL5AzHsTrAmmMN328UFjf8FueWvojBMCbvBqkWQ57ehZM6urZhl25bo9zU8DU/9QM xKKAtqxYUXBV3uJcEZ51tGMG1XGwkcgzomhYeV5tY/u0JxRDNX00nmst0lf565TYOWp8Mwj5L2Xo 0gPaC/xD7qYfskV1JJtc9AGH ) ; Key ID = 10415`
	`MYMONEY.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAaIdr4Cud2VZXbXhDt73tjLL7onIODtoIL3w7oKE8mxft3bNOt4XRBtSQGROAHv0xHI9BuHi s5YS2bZ94ay/kFeMpyXxhC0DtgByKONNcwxUDlwZQF8ff/6RDEatSIR0jecyHrQkG6LCQvotdsUF xm6ADNnYuQO8edcEp7hyWKdB ) ; Key ID = 14090`
	DNSKEY=11328/SEP is now in the chain-of-trust
	DS=11328/SHA-1 verifies DNSKEY=11328/SEP
	DS=11328/SHA-256 verifies DNSKEY=11328/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MYMONEY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202004246 20200126004246 11328 mymoney.gov. Y2aMB94GmbqlT7qxkqGI4iWwvqjH7SgxDvlADZhP53ZeW4ylxctj7jhD7QvUlLxXAY7wIdX9FmZO o/eeqbA78PI4xOndlcLPuNJ98EjR6rg93puClKiQyg6VQMLSNBFytoQVVO37+1b9nRFcxEzmAfxX O5Q3MZPTkpDUS8rTU/c= )`
	`MYMONEY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202004246 20200126004246 10415 mymoney.gov. e0EKLKPzt/1KtlWJdWTaFngrPH5bbC4zvoqSCgWxfX9ntdi3A/0h+/TFd1cCF+bFUB2kobnswBpp R49Y+2ABFhxwOAtvWhi0V14Z7RphIrnzmPn5WwwxOy1phL3qoemxlqCGHA0LWcATm92xpHtYqTfE UcumDkv517sXKmbaILc= )`
	`MYMONEY.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202004246 20200126004246 14090 mymoney.gov. UiL2FjAjVSykImZ+EVxJsIBu1/N2hqYl1L08oWGlb4e7ikkz8FeYJXrA512sSrPp2+MKldXmRtyr jAW8h4+Jhg+ejw9jZYCE2aSX/JQOC04VOa/nvIDC0OyiK5g4bDt/oFRr0f99DQuA6l1KxMPvllGo dvVIlW8QA92VhUSU4mk= )`
	RRSIG=11328 and DNSKEY=11328/SEP verifies the DNSKEY RRset
	RRSIG=10415 and DNSKEY=10415 verifies the DNSKEY RRset
	RRSIG=14090 and DNSKEY=14090 verifies the DNSKEY RRset
	DNSKEY=10415 is now in the chain-of-trust
	DNSKEY=14090 is now in the chain-of-trust
	Query to ns1.treasury.GOV for MYMONEY.GOV/A
	Received 398 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (398 bytes) ;; HEADER SECTION ;; id = 6394 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN A ;; ANSWER SECTION (3 records) MYMONEY.GOV. 2 IN A 166.123.218.220 MYMONEY.GOV. 2 IN RRSIG ( A 7 2 2 20200129134351 20200122134351 10415 mymoney.gov. UWHm561sgSuEcxTlJEFDDfyeRd/Te5GJL0Yz3tfDglzL9HE462i9JbXtuFky35YnvrB/Jprc0GAd ez2SyOzaD+i+71GcF/g3kzojGUYqb+f8MGtUD3VUJdwFEzFXhuyD/1X8URWBLgJF4795KXBBwT/1 cTsfX4BN9FekORcCtYs= ) MYMONEY.GOV. 2 IN RRSIG ( A 7 2 2 20200202003615 20200126003615 14090 mymoney.gov. dH291s1Cb89jjge80Kp9L7cMPpETpj0oiC5tTnVnYc+khDeL/HFXsbte/vzJ5Qi0xKRIKf6jrRTA baH3gTyE3jaYrm/BeTSZg67rG9lxPzt01V8KKw/yDoSPuVQ6u2Vi+7COfoI20u7ZnsC7zRKjwJCz l9ZQZWB6eKDK4UC0BF8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MYMONEY.GOV is authoritative for MYMONEY.GOV
	Found RRSIG signed by mymoney.gov zone
	Query to ns3.treasury.GOV for MYMONEY.GOV/SOA
	Error querying ns3.treasury.GOV/2610:108:3000:100a:0:0:0:155 for MYMONEY.GOV/SOA: 'IPv6 transport disabled'
	Received 1600 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1600 bytes) ;; HEADER SECTION ;; id = 7857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN SOA ;; ANSWER SECTION (3 records) MYMONEY.GOV. 28800 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 918 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) MYMONEY.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200131091708 20200124091708 10415 mymoney.gov. oEfNXs8jveE6dbxjstyYE7ug7EY4U6ap7yPfZGVCQdnn/q8S3XrsB6guZ128VxJ7cO0My85cz3/p kgxmvHyrB9OoGsjDb4ssqrsyaEdYYFSkEkZSWZtjTLKL7dtFmcZuWjmX26KNbihkoVSvsZ+xU8i0 GtTZA6QEs9ek14SCB8w= ) MYMONEY.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200202035324 20200126035324 14090 mymoney.gov. cK8/paQ5jyJv1vOpCkQBTsHIKGkXfnSAhXXgvQ6FD2dtZcHepMYrlT8xJdjftiFcfuvdEXzckEXC mkRXk0aH+dxJvjhr4/f4x4zd0fKRCRdLMQ2SbXS8wBnJYYfkFRZk6orHBV8EWwPSqlZiOsMluLT0 N1OzvM27VutX670Dlhg= ) ;; AUTHORITY SECTION (4 records) MYMONEY.GOV. 28800 IN NS ns3.treasury.GOV. MYMONEY.GOV. 28800 IN NS ns1.treasury.GOV. MYMONEY.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200131032334 20200124032334 10415 mymoney.gov. auEcT+0dK/eYJk0sm4ZTAt8h4hdkCN6PI1XXe0yG90jYlHBQGuMjoXlxU7H0kRzc9aMObG035INw 7cIpHsTsDh6HsFgR+j4lGzVdvfQoZzuIlST7466y4aPDY/mOcZbti8fpWcMD3gobBQo86silNMln 2xNZ8KmmXv3z3XHPBS8= ) MYMONEY.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200202035324 20200126035324 14090 mymoney.gov. VF2lQ4cg1rT9+jszPUx+T3vtAwD6HlbShJReTb8K6tlMHyUynDci/6XXE3peIfnSZzGGdXkKVaFK uOPp1QeK48V0W0qW9k/T1lOeB9bgTNx2SZwtL/g0kGV1RlWgCRxv1zHbL5vgOt7BjMPfpCfwkDu2 JbHpVqICev/+um3RbTo= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200201065943 20200125065943 31562 treasury.gov. PgLpSWDleSHaSAEndpFdEhcBPOe64XpPaKP4Md5CFW/glVxHUTEhv4KwlldEyH1p/foa1qAmeMtU /2eFL4R2PYQAtSnc6DGkUYkONrHAFqODpLzmuB9aQbvy6ySgmes+UmQqB/A0w3+lwxJUlHKHyDlJ 3raPGVZIDA8Qpap+ub4= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200201065943 20200125065943 31562 treasury.gov. m5woU8npp5YCIBtRy1TC62lqqCawp1/6KQkuAf71i1sXPDsKC4+UVmylKyoqrt1zmaoYtxFhK3Xr wkrW+aPG9UolokR8zswlMU8BL7/+rC9BowH6Oy0mCy/06+WRTadAsStSVrjy/7M2sy2xrJuqy0Nk fVBCH0al6H8tSztitDQ= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200201065943 20200125065943 31562 treasury.gov. JnkbYnUp/TM4pGQmfqmL09dRMKf1mwzFpDf2j+aDUl0vxVNCu9U0mzBtiWy/hOROkydyLTVuGb8B ZfDfGDlV8+fmqSXNSRyAP43bOhxBZY/n5LSDKxFMOzQRzca7uWwBdAby6D5z66BeTncN8I6lD2Dn jSjilUcN3lVz8Fxw+A8= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200201065943 20200125065943 31562 treasury.gov. NN6/zEdNmKVteXy66euayNEwX5GmLuUd/pbuxkdMuFvWJ+8QbyoFGeDdADKjkMmzPrWqyBfgCkFr O0YbW3NutSxlkFMINzML1cHr3wXrIFbD7pC/aHRN3f3TTIUtMQHD1XE4tnH2O99BaBW9gKjoYSuK lqf2wQbTq6hZWAYAL1k= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for MYMONEY.GOV/SOA
	Received 1600 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1600 bytes) ;; HEADER SECTION ;; id = 39653 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN SOA ;; ANSWER SECTION (3 records) MYMONEY.GOV. 28800 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 918 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) MYMONEY.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200129163822 20200122163822 10415 mymoney.gov. TiBJXb+TsFz01y1fCsSpvBBPsUv9LfdYbnuvV0yYZ2UQmAgGxAJVnhRLTrin2agRKfbOkXQ2luJk fN6vUOyDRwIy2b8hjXqNSY8yRXV9iTeGzyCiIRTvP8bQpmHGJHH31QkND1mgA9nDcMWyA7Mzx9vn oHaePh6sHAzFNnkTrAo= ) MYMONEY.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200202034112 20200126034112 14090 mymoney.gov. ZZxoP67AJX66v4OI+9JsfJuIrLDUoiGji707Z6E5OwsjEoSJyc721PW38vxWmLdsO3agOZxPsns4 Czhxv8hORo+NI1Vfq+vr8njYRChHiwh5v05OLHRECmcWKVAXSISPXSWd6tsqCV6zjOoGWAPDIusf DG8TPoIG37aQLp+qleA= ) ;; AUTHORITY SECTION (4 records) MYMONEY.GOV. 28800 IN NS ns1.treasury.GOV. MYMONEY.GOV. 28800 IN NS ns3.treasury.GOV. MYMONEY.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200129145049 20200122145049 10415 mymoney.gov. Tb4oMr2YkoigcSvtvbqRZ3wlXssfQ2gw9vV7JeR1RuJ/JQDhpBN96J9pfijLhDEnkzLOiSBIiNwM sLQHRBZxTjvonuBSJZdqWFhpToRxbq0wcrimdlALvosx42cYioXEkZ3AGZ0l5V44IM3TSbxWAqNN XDuVnKSDf9MQEMfo2HE= ) MYMONEY.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200202004513 20200126004513 14090 mymoney.gov. n+XqPoAjV7KUZU1+sNooB4Mw749GyYBp+6lnulCQuifoNO5tDryTJMyKRbEQrSrUvnsYgqz2Io3N MEDAMok29mFGNYUvgIJWX2bEFZNGsDi2F9qCRld8sAdiZmZCrMtCGbw3nsTbaM9ptDrY88K7ao2c aXVdpSRmBhj65Eavi0A= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200129134155 20200122134155 31562 treasury.gov. PGffBhTopwOQtBUuYk/XcIuUNeKf4ro8WqNj2u9IgTX5cU1wD4P8f8k6M1dVCGo6IPJctGoeSPvh xl2/XkH89ziut1OF7krbNvBmlK4NfCHch8mijFNz5fT7AY4iVE2gaO8J81sYvU+iuQdY4h1svyo3 gMBiG59ghAb8meRYRPk= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200129134155 20200122134155 31562 treasury.gov. inzafH8eZLVXp+T7H83qIcy3TENej1/R8x1mziPyWSHzr75ZpFJnFgZ3do8U+s8y+3DFTQhfN/Q9 WViOjDF+yciMWy+AIKBQS6IEYlqNiv7woTBYW83UfFfO5CoqebfIQBZdhszvNHBL6UUClIYlP6pp qzVI/yfAmtnz1fGOvLY= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200129134155 20200122134155 31562 treasury.gov. KEOQfI6Kpq6qPbYUyj2bqUYYp4eAtqjf5TLtGeJbRB2dSDyBUNGJlq6pgnw8SWDeDOp0yH8il1as GxpLO4syQAOX6RSGgS14hJ/4OBF+SKYucz39apXzAiBc9EOqQTm1aXNwpFK1B3LyEJHSvNkOCSfT Bjjl+Fs1y5fnYM7U52s= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200129134155 20200122134155 31562 treasury.gov. h5lKByHftGWHl+FvMM4/FvJ4nogX9IIWTFmIHYucW0BoMVKJ4jgoDGti8eWCjnX4PqQvMInh3al4 1KN2y05xWG5K0JW2PnDyVx56icRnFw0C8Onhlxnn0r1gSoBGFDh7UxsTiGr2x+7cR6jN9xokE87p TTsWa6Fnnwzil/Zv4pM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for MYMONEY.GOV/A
	Error querying ns1.treasury.GOV/2610:108:4000:100a:0:0:0:249 for MYMONEY.GOV/A: 'IPv6 transport disabled'
	Received 398 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (398 bytes) ;; HEADER SECTION ;; id = 41496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MYMONEY.GOV. IN A ;; ANSWER SECTION (3 records) MYMONEY.GOV. 2 IN A 166.123.218.220 MYMONEY.GOV. 2 IN RRSIG ( A 7 2 2 20200129134241 20200122134241 10415 mymoney.gov. s3BtbrCABC1kVasY+gArdA8tuJAfYNVAYsyq/2hCdk+gQDYkQ+kasgfIdY+mETSEO19vCb46w/p2 1EmqRxvYbNc378VQ4GxTzEQfcxP61vI76qb1StnzqQ7Qeyn/Gc4wn4wLvEAOmToNapnOKfwV7oZo BT9MZEd+g8vXv8s8P5o= ) MYMONEY.GOV. 2 IN RRSIG ( A 7 2 2 20200202003605 20200126003605 14090 mymoney.gov. P8w8EytVtzwHwk9Uhl3KFpKVmXGsDR+15CMCEAfOncKSZYVUN9tZYnyJRaWj3rdmNgCG0dBnODFN 1Em3achoKXgI2f4uBZ1YOHcdNd4dD6/5KMFxECQK0Y2ZHd6tYKNWe9lArrwCppKIdE8BfwOahWbZ lRSzbiVeh+5feDGkMLM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MYMONEY.GOV A RR has value 166.123.218.220
	Found 2 RRSIGs over A RRset
	`MYMONEY.GOV. 2 IN RRSIG ( A 7 2 2 20200129134241 20200122134241 10415 mymoney.gov. s3BtbrCABC1kVasY+gArdA8tuJAfYNVAYsyq/2hCdk+gQDYkQ+kasgfIdY+mETSEO19vCb46w/p2 1EmqRxvYbNc378VQ4GxTzEQfcxP61vI76qb1StnzqQ7Qeyn/Gc4wn4wLvEAOmToNapnOKfwV7oZo BT9MZEd+g8vXv8s8P5o= )`
	`MYMONEY.GOV. 2 IN RRSIG ( A 7 2 2 20200202003605 20200126003605 14090 mymoney.gov. P8w8EytVtzwHwk9Uhl3KFpKVmXGsDR+15CMCEAfOncKSZYVUN9tZYnyJRaWj3rdmNgCG0dBnODFN 1Em3achoKXgI2f4uBZ1YOHcdNd4dD6/5KMFxECQK0Y2ZHd6tYKNWe9lArrwCppKIdE8BfwOahWbZ lRSzbiVeh+5feDGkMLM= )`
	RRSIG=10415 and DNSKEY=10415 verifies the A RRset
	RRSIG=14090 and DNSKEY=14090 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MYMONEY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: