DNSSEC Analyzer - NCIFCRF.GOV

Domain Name:

Time: 2020-10-28 03:07:38 UTC, NTP stratum 4

Analyzing DNSSEC problems for NCIFCRF.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 48396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to m.root-servers.net for NCIFCRF.GOV/A
	Received 669 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (669 bytes) ;; HEADER SECTION ;; id = 45797 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (658 bytes) ;; HEADER SECTION ;; id = 58948 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 406 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (406 bytes) ;; HEADER SECTION ;; id = 32528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 40802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to d.gov-servers.net for NCIFCRF.GOV/A
	Received 760 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (760 bytes) ;; HEADER SECTION ;; id = 42252 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) NCIFCRF.GOV. 86400 IN NS ns2.nih.GOV. NCIFCRF.GOV. 86400 IN NS ns.nih.GOV. NCIFCRF.GOV. 86400 IN NS ns3.nih.GOV. NCIFCRF.GOV. 3600 IN DS 65491 5 1 db40ddebd24bbc4136e4bed8e8410a62e8e20c65 NCIFCRF.GOV. 3600 IN DS 58258 5 1 fc22f61d3e5a229ef13b70ae9638951e176d6e73 NCIFCRF.GOV. 3600 IN DS 60886 5 1 139c64069b88f4e16abf74b5b839c2b1f869b4ea NCIFCRF.GOV. 3600 IN DS 26233 5 1 20e0521a3fc6b82f028960b26cb3db3244a58ecd NCIFCRF.GOV. 3600 IN DS ( 65491 5 2 b8f9d50161d3cc448912cbcadfacb8236daddd7c25d4c7795d120eeed315d7f1 ) NCIFCRF.GOV. 3600 IN DS ( 58258 5 2 110b1163b1f07052121fb521bffb5da8ad5172fc5d7ea8caf094499a86294ad4 ) NCIFCRF.GOV. 3600 IN DS ( 60886 5 2 85dd17d477f7478db2b350c739a63aa9f01b3e2f5070bb906f816fc8083d36e1 ) NCIFCRF.GOV. 3600 IN DS ( 26233 5 2 be92681f584e49f17246159ada33ff8a48c9c214fc7d7c15a0ef091c5dcda161 ) NCIFCRF.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. L8MUACEtkc3h0/G/UvixvYGFgNHgPu7MfjTpjhyvgs7KIRfnc6v8kKX7mIUAvZqS/fc63rV/f/Rj aL9cQmjduiClDs4YU7mvRwZorS8oaKNlJjm6JV6v3w0wMxjhSvwDbE2Pgayrv8tGMwjMhS6pHL0U nO58bfaYeonQe7UOf5ocWBFLkCI99sYSP3BOIGVDGwWyxQSukdxoFOnfgH121w== ) ;; ADDITIONAL SECTION (7 records) ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for NCIFCRF.GOV/DNSKEY
	Received 760 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (760 bytes) ;; HEADER SECTION ;; id = 47582 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) NCIFCRF.GOV. 86400 IN NS ns2.nih.GOV. NCIFCRF.GOV. 86400 IN NS ns.nih.GOV. NCIFCRF.GOV. 86400 IN NS ns3.nih.GOV. NCIFCRF.GOV. 3600 IN DS 65491 5 1 db40ddebd24bbc4136e4bed8e8410a62e8e20c65 NCIFCRF.GOV. 3600 IN DS 58258 5 1 fc22f61d3e5a229ef13b70ae9638951e176d6e73 NCIFCRF.GOV. 3600 IN DS 60886 5 1 139c64069b88f4e16abf74b5b839c2b1f869b4ea NCIFCRF.GOV. 3600 IN DS 26233 5 1 20e0521a3fc6b82f028960b26cb3db3244a58ecd NCIFCRF.GOV. 3600 IN DS ( 65491 5 2 b8f9d50161d3cc448912cbcadfacb8236daddd7c25d4c7795d120eeed315d7f1 ) NCIFCRF.GOV. 3600 IN DS ( 58258 5 2 110b1163b1f07052121fb521bffb5da8ad5172fc5d7ea8caf094499a86294ad4 ) NCIFCRF.GOV. 3600 IN DS ( 60886 5 2 85dd17d477f7478db2b350c739a63aa9f01b3e2f5070bb906f816fc8083d36e1 ) NCIFCRF.GOV. 3600 IN DS ( 26233 5 2 be92681f584e49f17246159ada33ff8a48c9c214fc7d7c15a0ef091c5dcda161 ) NCIFCRF.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. L8MUACEtkc3h0/G/UvixvYGFgNHgPu7MfjTpjhyvgs7KIRfnc6v8kKX7mIUAvZqS/fc63rV/f/Rj aL9cQmjduiClDs4YU7mvRwZorS8oaKNlJjm6JV6v3w0wMxjhSvwDbE2Pgayrv8tGMwjMhS6pHL0U nO58bfaYeonQe7UOf5ocWBFLkCI99sYSP3BOIGVDGwWyxQSukdxoFOnfgH121w== ) ;; ADDITIONAL SECTION (7 records) ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone NCIFCRF.GOV

NCIFCRF.GOV

	Checking DS between GOV and NCIFCRF.GOV
	Query to d.gov-servers.net for NCIFCRF.GOV/DS
	Received 571 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (571 bytes) ;; HEADER SECTION ;; id = 10922 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 9 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN DS ;; ANSWER SECTION (9 records) NCIFCRF.GOV. 3600 IN DS 65491 5 1 db40ddebd24bbc4136e4bed8e8410a62e8e20c65 NCIFCRF.GOV. 3600 IN DS 58258 5 1 fc22f61d3e5a229ef13b70ae9638951e176d6e73 NCIFCRF.GOV. 3600 IN DS 60886 5 1 139c64069b88f4e16abf74b5b839c2b1f869b4ea NCIFCRF.GOV. 3600 IN DS 26233 5 1 20e0521a3fc6b82f028960b26cb3db3244a58ecd NCIFCRF.GOV. 3600 IN DS ( 65491 5 2 b8f9d50161d3cc448912cbcadfacb8236daddd7c25d4c7795d120eeed315d7f1 ) NCIFCRF.GOV. 3600 IN DS ( 58258 5 2 110b1163b1f07052121fb521bffb5da8ad5172fc5d7ea8caf094499a86294ad4 ) NCIFCRF.GOV. 3600 IN DS ( 60886 5 2 85dd17d477f7478db2b350c739a63aa9f01b3e2f5070bb906f816fc8083d36e1 ) NCIFCRF.GOV. 3600 IN DS ( 26233 5 2 be92681f584e49f17246159ada33ff8a48c9c214fc7d7c15a0ef091c5dcda161 ) NCIFCRF.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. L8MUACEtkc3h0/G/UvixvYGFgNHgPu7MfjTpjhyvgs7KIRfnc6v8kKX7mIUAvZqS/fc63rV/f/Rj aL9cQmjduiClDs4YU7mvRwZorS8oaKNlJjm6JV6v3w0wMxjhSvwDbE2Pgayrv8tGMwjMhS6pHL0U nO58bfaYeonQe7UOf5ocWBFLkCI99sYSP3BOIGVDGwWyxQSukdxoFOnfgH121w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 8 DS records for NCIFCRF.GOV in the GOV zone
	DS=65491/SHA-1 has algorithm RSASHA1
	DS=58258/SHA-1 has algorithm RSASHA1
	DS=60886/SHA-1 has algorithm RSASHA1
	DS=26233/SHA-1 has algorithm RSASHA1
	DS=65491/SHA-256 has algorithm RSASHA1
	DS=58258/SHA-256 has algorithm RSASHA1
	DS=60886/SHA-256 has algorithm RSASHA1
	DS=26233/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`NCIFCRF.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. L8MUACEtkc3h0/G/UvixvYGFgNHgPu7MfjTpjhyvgs7KIRfnc6v8kKX7mIUAvZqS/fc63rV/f/Rj aL9cQmjduiClDs4YU7mvRwZorS8oaKNlJjm6JV6v3w0wMxjhSvwDbE2Pgayrv8tGMwjMhS6pHL0U nO58bfaYeonQe7UOf5ocWBFLkCI99sYSP3BOIGVDGwWyxQSukdxoFOnfgH121w== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=65491/SHA-1 is now in the chain-of-trust
	DS=58258/SHA-1 is now in the chain-of-trust
	DS=60886/SHA-1 is now in the chain-of-trust
	DS=26233/SHA-1 is now in the chain-of-trust
	`NCIFCRF.GOV. 3600 IN DS 65491 5 1 db40ddebd24bbc4136e4bed8e8410a62e8e20c65`
	`NCIFCRF.GOV. 3600 IN DS 58258 5 1 fc22f61d3e5a229ef13b70ae9638951e176d6e73`
	`NCIFCRF.GOV. 3600 IN DS 60886 5 1 139c64069b88f4e16abf74b5b839c2b1f869b4ea`
	`NCIFCRF.GOV. 3600 IN DS 26233 5 1 20e0521a3fc6b82f028960b26cb3db3244a58ecd`
	`NCIFCRF.GOV. 3600 IN DS ( 65491 5 2 b8f9d50161d3cc448912cbcadfacb8236daddd7c25d4c7795d120eeed315d7f1 )`
	`NCIFCRF.GOV. 3600 IN DS ( 58258 5 2 110b1163b1f07052121fb521bffb5da8ad5172fc5d7ea8caf094499a86294ad4 )`
	`NCIFCRF.GOV. 3600 IN DS ( 60886 5 2 85dd17d477f7478db2b350c739a63aa9f01b3e2f5070bb906f816fc8083d36e1 )`
	`NCIFCRF.GOV. 3600 IN DS ( 26233 5 2 be92681f584e49f17246159ada33ff8a48c9c214fc7d7c15a0ef091c5dcda161 )`
	Query to ns3.nih.GOV for NCIFCRF.GOV/DNSKEY
	Received 4573 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (4573 bytes) ;; HEADER SECTION ;; id = 57111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 22 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN DNSKEY ;; ANSWER SECTION (22 records) NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAbm7BjYZu30dfVeIu+NbTpOiK/PBKlvKIhJdLSYyjnh0L/539WCaaVCFpRQ37yA1pS48XHEB qtaWzxSGWBs59gD7T6PTLjpedKNVTyrYr+08ICzuTFC1IEB+l9rU/LpWbAF9Fhs3k99JlTXE6+vV 61WKxMMfK18JZp81PkDHm3GZ ) ; Key ID = 3636 NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAcx0+oaqIqsY/tQlww6BJouBicgmxtn6D2/+7cc7a1M5kmwFsnCvmqfNqY6S9y2qnYs8NErL ovyOdq1xQNflwT3WxSnHplml/xMOEsuRGeYSaFGUWPV5X3yNmfFrylHmGow0JjzHTrpMrc6bkqTT BkmeH1u8y872MtVa0BqkDnUX ) ; Key ID = 11313 NCIFCRF.GOV. 604800 IN DNSKEY ( 257 3 5 AwEAAa8DOl5rtIg7AhHaOz2ipQCeqf9zZu5BW9e+rMETcbsFdgIcathcpBEi81NOsjzXISVPL/k2 tpi5WFmWGD677U1Asa0Qvvr+PqlBlD7uGRNVtpORh11Bf83wSxYqRrqTCTq2K+roHP8x9KRkF9Kf syD3jVpBJUAA1s+08AP79l2REeXQXcqiIaENqnFNJWKy1lNpBUZzgwhH2QRcBWqRpDmWbVVP07q4 VZRp35OMPLAb5paSIcJviQnFzjNgbOWsKoOLCLtPFgoCn4Y8+pO8VXu8BMUgles2NGwC5uAsQ4Oe Y3dAhSRPKUKkhrrLGsG/5Se2YmsU1vYhNDIDZCxSUBU= ) ; Key ID = 58258 NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAcjqkNtr2jGxp7RzxmZ13DXEx8VfcyrCT4Ds0pxz9i7VmE6IA70W9cS5xYqcW+xuQA1E0vH8 +vP3gXwImpfhvI8obP0qFB+2KmJzYLK5/sM1pBzLNij2JNWEB7bDbWZxaxgQRGd4EgjGlBVB3eYb c5fo2HQrDokXEJQOcn/XB+zJ ) ; Key ID = 1230 NCIFCRF.GOV. 604800 IN DNSKEY ( 257 3 5 AwEAAb07wpTt5C0GTnplxuqCA458zKmKU1CMD3ejlqDQ/9/PYaqRJ/XLsVEdLAskABshxbduV+v/ 1M2ACFe0lZkwCDpe+ATGUJ+mm32IxeuhXLwqU6UAE4wiRnqqSW87Z6arcTAuYWf+Mn92SRdcENpI 7v78AN9hjn3KUaty/Yz8LmqwDj4qcYzAO1PUJVLCE6aKYcThT68eMhHWu2KnTg8osrVcP08ulJrG 6Qm1pLv1jv3nstcKg1EtFEIR1gdE4p77BgU/eiW/NgSwiM/xwTNEd7+5zY3V5GpCvML+v4wHEJxD yETrMkrVEdJDa+vG3l/BQ1Nyx+QD2/UaqabHw1HUD98= ) ; Key ID = 60886 NCIFCRF.GOV. 604800 IN DNSKEY ( 257 3 5 AwEAAdzGMFE+X3h7uixKwSD/eRX/1K9csjskSuXIgEdIslhEQDStnI2gxTCTp6lidTPyuCmo6Qvw grhT4JEYnOXBTW3g8OucooFqiz9ljk3xS0U9MytETfSunRLtwzFk807spKCu5pU65fvZRtnZABy4 e1RFeUdIY3J5rjbFtThQ6sACBrpQiffBhzFQtR5obAOFJzKq/bHQ1J8eEKnf4tfyaWlzC/1+Qj9E THszk0wT2RqPZObAswA7PUmUbLHPTQkbCnAzRESQx87QG6lO/Pe+Bp0nM/1E+Oq7sWhbIwU1/BrQ l3I2HtDGGQFuQ5vF/XjfWw4llvIf8nNcWJFuqQywtFk= ) ; Key ID = 26233 NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAaRjDvp1vqhEpx14vIQ/H0i10wCdofAOWyky5MIzAjqClXljDdnjJjLK8Oxrb7QpGsCw57tr 9yp7EfnPGN3msgBehLifgw3v+yrvoynlPi+SjSFaAFoG2zpiXeM8j/+WMmRcBkv9TPwgI4UAFsw+ 6HVivhBKJD1FdNc0U2CdBnSN ) ; Key ID = 49455 NCIFCRF.GOV. 604800 IN DNSKEY ( 257 3 5 AwEAAdk8Uc+fSCGGSvEgDvFNoUsHCZPwqCG80n9aJdry51Ch8zjoVDHSfa3oBdGU6FP6C7usXGTk GHxwOEDFpgNZkirfVLojQ6TbJcjw+CH1a1mlWjWGdgj3uWQKr6LkK9RJMCWmk9j8Ka2n5BjvEieI uTlacPPngwNtSKKAUHN5xNkA+2K5xI1QV1wtGFw7II9KA57O5BGSorF2KupMSPUe8SuST86hOeNw HStK9V1QIn2pRCrfknHiAukQWCOuJfLlvGMTkIwUhCnVpXRpJypnCiDuc/JQxIC4Z7rLErpMkIp0 OtfmdyAba6/QRwYoR+fsXgMaTDjPl8R3jDQ4qxpeVGM= ) ; Key ID = 65491 NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAb9n7agFya+5WrCYRIjxQEfO6cyR3mfF9SCJ29wKIfbY9E+ENm6ZUiCMsWVlXmPqoM6nSP8S OHJnR/uFwlwfnM3HkqVBK/xgxVciau84JAtqCBruu1cW0F6+8fst4ZjHJA8XrdLiHl5nLgkC1FnU tBQ6SbiEmubQBe4wjNV1hsoX ) ; Key ID = 3906 NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAboCoKk8ZdEBD7eHmgEdmAjuJxLJBlxIw2AkapbPSk34FbMp84ngYn5S9Y/+NmP1a5pRgOyB 7VqIi+o89JEyu2yeh0mIzh1sg/WT/mhn55X2W+egIS7BX5xobDVFVgIyQOcjhn18N/hTzRTu59EH XxJ1pOVcFr+iHFOya1Y5zzu1 ) ; Key ID = 64302 NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAcFvupRBvqyicKPWdbdGTMSw3jA0RZVMxC5XZ4Qylc3gyml592arXyAvYcsZrg45Lwx5twWT YOkXM7B0gwpKm+vriiEd6XD1qSkrVIK2yFaASo2vK5tfytGHr9/N6vQ6hSNBpEoEv1wSVcEbkwDM w0LLYUxsIIXPh5Ph90YayGs3 ) ; Key ID = 6900 NCIFCRF.GOV. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 1230 ncifcrf.gov. erMs/YR+1KHV3zUVub/erny/COX688fmmB014DeTUfN0ceXirlvL03EfbrmtGK4cG2PH5jvjMAIa CABtuOOHRoMVLKM8NydThnRlEV/ZozMyc+uF0gkrTpoPxR01xRatd6B/RwuPOeYkyxZB6e7rWqkV agtOI4XMnkHwiR3sgt0= ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 3636 ncifcrf.gov. R8bz54NS10yhLmX24IYDke+up6Vo12oSA8ED5qK1HzpWz0QG2dO7R+AiZp1XtFvrYt9qu512QdlA sS5r44zNcwxrEPvi+XasR8hcdT30IlNnQqQb6VWsxyQHdhesFfZEOkua4BVZQDSrTHT4psZaAa+l jekWTCTvq6NmliYd2og= ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 3906 ncifcrf.gov. vrAnokogmol7cC+KikzFcWZKu9KflAETa2BHj0MYLKG2UXKhWVX9nrdcJ3PwpF54dOnxokY0QUnw ASL5JNb+IDWhk8sP7p5mVkIu7d1WccLVXSLEY+NKw78vYD6rj5YKe2KjU44noqatZDdYXtzGqaZ+ d/l2DpR0o7BemYmz2LA= ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 6900 ncifcrf.gov. lkhrjN3+dkukX4Cn1XQpsNURaNaf2F1yh2jwpbyEfmxKT9I+g7hAb6njAfubN9BlWauhAPvubSJ+ EoQzCUBAiF+iMhtVHGK7kVoQ4t6U+t0vMMzGEmivm3HCJX/TsTrlyMF76+oPoe1Cu3cG5tX1Fh2B B6Cc/Bq4SI3mpAO+Nsw= ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 11313 ncifcrf.gov. KjwJso+0JwE1kw/hX9tQ5+qzHegXvt+SAtwPgTwpoX29gA1ZDmEIrqBVNOkF5oxrc0QT95U6jwQC D8fdBm+8m7KRuLIqLW5NpPPpus7EUPtibEQRHjxBRMFd5Fn6eIKCDQ6fMxpgie+dEOjZX9WAiZI+ EiAHpcLpCv2Kc23k33Q= ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 26233 ncifcrf.gov. QemfCAkRvIM9nWzLGMdin1DPwKDHcXWiUOG7SK9t9YWKuo63BQnDioVTVDkleib2tu6OMgQjf7qG WJx/ItedFsf9WDNx7hDNYOahsVlQ3+xx50m71+0vooguh29ro3rWOg7CNzDjvNWEJOBCXMi5xMW5 qDTf45MsS2BMN5KW79S5/0KLEajxPkJCzQ94BSIZXWlUv5DCdDKx2wyqm+eyK2bjePoFukGDiOFY FwpLgG8TMIW33/Gjrb8yWH+VkcehZKqvDUmXXzYrU2w2/6t3uOmZBmcP3zqdyepUFjtCk6Cws5FD 8GWZxrgjqPzzSgxypBW6yfiZSJTKmHaLSA0SSw== ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 49455 ncifcrf.gov. eIimHYxjex8tie8KeOQmjoJ/mwVFIP5/LuW3LD1Z3a96GpRQnmHhCUSJQJx1iHh2OVxeYT4Q7iU3 VZOVr3bQKf/k6rwkZTonDXIToL5vVpJhY9D7UH9VBljNBzS/aU5rNe3RPZ7dF0bZw3Heozjc64wF 0C9GlrY7nWwV8rS2vdM= ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 58258 ncifcrf.gov. D01tDJxZIhNWJfIxDQmUI0RTJRQDQv+1NXJQaBwI890ySjeo3OGOi3ylf2Xjm0T5NOOSI5jZg8ei n1ZGvbKN1sL+i23/Z+TMBe2tW06phf/7vj5RbrCQyBnHjrYS5b/uDtt1JFvw4iSkuKSlcQ/SdU8+ g1J5B2RziMN5HsqQjMCagZAbOp7eoDx4+BfogS190ZOZBRhheKTZ6N/PCFL9iIiCaVBPZD4GI5EG mX68JA0HsG5Y50ZhzS22z4JpARLr0ZnWAcQicvePpxrt0/Vh971OxOgDK5518Uyp13VneASCqRcf 9yv0IuSg4sXxenM7FWyYRb1L6Vr6+y7sMX3dMQ== ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 60886 ncifcrf.gov. DNW/AIN0F2aA4YmHSJmwXx+mC+TiKk2t2BhYA5jzIDrloLXq7CmT12E68sPZka5mjGoEUZSedW5b KVr8wNKWMtmqe8r4hMTztwSFQd6MFACDnKUcE0Ldh4QPdAw5pJIQIp5/6iqq+4TNm9XSzOrW7Vu3 1awKw3pcn5DZYjI7eqOkj9GjGR0xHgFMiej16FqXzNTa4VORX5aHDCk1vBgl9wY1df7W2kONlAOD Wtv+wTLj7BcYopUpVb0SP5jqRCAQTmBRtF9TGJsHYghi3tosK2aEKXmsTrKoiqTl+HisSAxdha6J 8S5ARtdaF2xAAwsnOvbsWh0Ot5YnzhA+feN5wg== ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 64302 ncifcrf.gov. HYc/aildQTThsThsV6HNKtSF4fBTyQ4CMlMR2zuDlsQPTuZ9CV+VwHZRfDMEJQPlRNnoWkP3wy8b zE2VvOEDEboHXzgqTUnzB+VXfII+Bzq3g8J3rNFnAGIAiapr0yBtCHRSk/V1ozV84GzY9++9cpyA wGFE3Cz7H7FosxnxoeU= ) ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 65491 ncifcrf.gov. EGEf230SS5Td1IbB7kC2FMtqFEcq5nGEK9Tn7ndmgyKD9f0AhYBpSrVrt/bNp4nLKFnxDhg5K9YD wIbRLfYneqw2v+B8pUsuyhsmOicUMdZuZ56v2ygMDvH6Xf28T5gYAVSN1jX8mFWFY6sA6+//6j7g vD08BDVAOn3SE5UR4Py6t6ePKozKDVwbW55xUmjPW3AYt/QnRe2CQxeh7zlVP8LD1jUxgr1D7RtR oJCEYTA9gadHpmCyPZ2mlSUHh7py7uxPthSSFEQMUHIXxNu3IUXAmoCPa0Qypn7SjZ+F69x3+Uwr vEUWCsRFi9fyVxvUGwky+7rnhR4CG7MyEroLLA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 11 DNSKEY records for NCIFCRF.GOV
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAbm7BjYZu30dfVeIu+NbTpOiK/PBKlvKIhJdLSYyjnh0L/539WCaaVCFpRQ37yA1pS48XHEB qtaWzxSGWBs59gD7T6PTLjpedKNVTyrYr+08ICzuTFC1IEB+l9rU/LpWbAF9Fhs3k99JlTXE6+vV 61WKxMMfK18JZp81PkDHm3GZ ) ; Key ID = 3636`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAcx0+oaqIqsY/tQlww6BJouBicgmxtn6D2/+7cc7a1M5kmwFsnCvmqfNqY6S9y2qnYs8NErL ovyOdq1xQNflwT3WxSnHplml/xMOEsuRGeYSaFGUWPV5X3yNmfFrylHmGow0JjzHTrpMrc6bkqTT BkmeH1u8y872MtVa0BqkDnUX ) ; Key ID = 11313`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 257 3 5 AwEAAa8DOl5rtIg7AhHaOz2ipQCeqf9zZu5BW9e+rMETcbsFdgIcathcpBEi81NOsjzXISVPL/k2 tpi5WFmWGD677U1Asa0Qvvr+PqlBlD7uGRNVtpORh11Bf83wSxYqRrqTCTq2K+roHP8x9KRkF9Kf syD3jVpBJUAA1s+08AP79l2REeXQXcqiIaENqnFNJWKy1lNpBUZzgwhH2QRcBWqRpDmWbVVP07q4 VZRp35OMPLAb5paSIcJviQnFzjNgbOWsKoOLCLtPFgoCn4Y8+pO8VXu8BMUgles2NGwC5uAsQ4Oe Y3dAhSRPKUKkhrrLGsG/5Se2YmsU1vYhNDIDZCxSUBU= ) ; Key ID = 58258`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAcjqkNtr2jGxp7RzxmZ13DXEx8VfcyrCT4Ds0pxz9i7VmE6IA70W9cS5xYqcW+xuQA1E0vH8 +vP3gXwImpfhvI8obP0qFB+2KmJzYLK5/sM1pBzLNij2JNWEB7bDbWZxaxgQRGd4EgjGlBVB3eYb c5fo2HQrDokXEJQOcn/XB+zJ ) ; Key ID = 1230`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 257 3 5 AwEAAb07wpTt5C0GTnplxuqCA458zKmKU1CMD3ejlqDQ/9/PYaqRJ/XLsVEdLAskABshxbduV+v/ 1M2ACFe0lZkwCDpe+ATGUJ+mm32IxeuhXLwqU6UAE4wiRnqqSW87Z6arcTAuYWf+Mn92SRdcENpI 7v78AN9hjn3KUaty/Yz8LmqwDj4qcYzAO1PUJVLCE6aKYcThT68eMhHWu2KnTg8osrVcP08ulJrG 6Qm1pLv1jv3nstcKg1EtFEIR1gdE4p77BgU/eiW/NgSwiM/xwTNEd7+5zY3V5GpCvML+v4wHEJxD yETrMkrVEdJDa+vG3l/BQ1Nyx+QD2/UaqabHw1HUD98= ) ; Key ID = 60886`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 257 3 5 AwEAAdzGMFE+X3h7uixKwSD/eRX/1K9csjskSuXIgEdIslhEQDStnI2gxTCTp6lidTPyuCmo6Qvw grhT4JEYnOXBTW3g8OucooFqiz9ljk3xS0U9MytETfSunRLtwzFk807spKCu5pU65fvZRtnZABy4 e1RFeUdIY3J5rjbFtThQ6sACBrpQiffBhzFQtR5obAOFJzKq/bHQ1J8eEKnf4tfyaWlzC/1+Qj9E THszk0wT2RqPZObAswA7PUmUbLHPTQkbCnAzRESQx87QG6lO/Pe+Bp0nM/1E+Oq7sWhbIwU1/BrQ l3I2HtDGGQFuQ5vF/XjfWw4llvIf8nNcWJFuqQywtFk= ) ; Key ID = 26233`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAaRjDvp1vqhEpx14vIQ/H0i10wCdofAOWyky5MIzAjqClXljDdnjJjLK8Oxrb7QpGsCw57tr 9yp7EfnPGN3msgBehLifgw3v+yrvoynlPi+SjSFaAFoG2zpiXeM8j/+WMmRcBkv9TPwgI4UAFsw+ 6HVivhBKJD1FdNc0U2CdBnSN ) ; Key ID = 49455`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 257 3 5 AwEAAdk8Uc+fSCGGSvEgDvFNoUsHCZPwqCG80n9aJdry51Ch8zjoVDHSfa3oBdGU6FP6C7usXGTk GHxwOEDFpgNZkirfVLojQ6TbJcjw+CH1a1mlWjWGdgj3uWQKr6LkK9RJMCWmk9j8Ka2n5BjvEieI uTlacPPngwNtSKKAUHN5xNkA+2K5xI1QV1wtGFw7II9KA57O5BGSorF2KupMSPUe8SuST86hOeNw HStK9V1QIn2pRCrfknHiAukQWCOuJfLlvGMTkIwUhCnVpXRpJypnCiDuc/JQxIC4Z7rLErpMkIp0 OtfmdyAba6/QRwYoR+fsXgMaTDjPl8R3jDQ4qxpeVGM= ) ; Key ID = 65491`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAb9n7agFya+5WrCYRIjxQEfO6cyR3mfF9SCJ29wKIfbY9E+ENm6ZUiCMsWVlXmPqoM6nSP8S OHJnR/uFwlwfnM3HkqVBK/xgxVciau84JAtqCBruu1cW0F6+8fst4ZjHJA8XrdLiHl5nLgkC1FnU tBQ6SbiEmubQBe4wjNV1hsoX ) ; Key ID = 3906`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAboCoKk8ZdEBD7eHmgEdmAjuJxLJBlxIw2AkapbPSk34FbMp84ngYn5S9Y/+NmP1a5pRgOyB 7VqIi+o89JEyu2yeh0mIzh1sg/WT/mhn55X2W+egIS7BX5xobDVFVgIyQOcjhn18N/hTzRTu59EH XxJ1pOVcFr+iHFOya1Y5zzu1 ) ; Key ID = 64302`
	`NCIFCRF.GOV. 604800 IN DNSKEY ( 256 3 5 AwEAAcFvupRBvqyicKPWdbdGTMSw3jA0RZVMxC5XZ4Qylc3gyml592arXyAvYcsZrg45Lwx5twWT YOkXM7B0gwpKm+vriiEd6XD1qSkrVIK2yFaASo2vK5tfytGHr9/N6vQ6hSNBpEoEv1wSVcEbkwDM w0LLYUxsIIXPh5Ph90YayGs3 ) ; Key ID = 6900`
	DNSKEY=58258/SEP is now in the chain-of-trust
	DS=58258/SHA-1 verifies DNSKEY=58258/SEP
	DS=58258/SHA-256 verifies DNSKEY=58258/SEP
	DNSKEY=60886/SEP is now in the chain-of-trust
	DS=60886/SHA-1 verifies DNSKEY=60886/SEP
	DS=60886/SHA-256 verifies DNSKEY=60886/SEP
	DNSKEY=26233/SEP is now in the chain-of-trust
	DS=26233/SHA-1 verifies DNSKEY=26233/SEP
	DS=26233/SHA-256 verifies DNSKEY=26233/SEP
	DNSKEY=65491/SEP is now in the chain-of-trust
	DS=65491/SHA-1 verifies DNSKEY=65491/SEP
	DS=65491/SHA-256 verifies DNSKEY=65491/SEP
	Found 11 RRSIGs over DNSKEY RRset
	`NCIFCRF.GOV. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 1230 ncifcrf.gov. erMs/YR+1KHV3zUVub/erny/COX688fmmB014DeTUfN0ceXirlvL03EfbrmtGK4cG2PH5jvjMAIa CABtuOOHRoMVLKM8NydThnRlEV/ZozMyc+uF0gkrTpoPxR01xRatd6B/RwuPOeYkyxZB6e7rWqkV agtOI4XMnkHwiR3sgt0= )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 3636 ncifcrf.gov. R8bz54NS10yhLmX24IYDke+up6Vo12oSA8ED5qK1HzpWz0QG2dO7R+AiZp1XtFvrYt9qu512QdlA sS5r44zNcwxrEPvi+XasR8hcdT30IlNnQqQb6VWsxyQHdhesFfZEOkua4BVZQDSrTHT4psZaAa+l jekWTCTvq6NmliYd2og= )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 3906 ncifcrf.gov. vrAnokogmol7cC+KikzFcWZKu9KflAETa2BHj0MYLKG2UXKhWVX9nrdcJ3PwpF54dOnxokY0QUnw ASL5JNb+IDWhk8sP7p5mVkIu7d1WccLVXSLEY+NKw78vYD6rj5YKe2KjU44noqatZDdYXtzGqaZ+ d/l2DpR0o7BemYmz2LA= )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 6900 ncifcrf.gov. lkhrjN3+dkukX4Cn1XQpsNURaNaf2F1yh2jwpbyEfmxKT9I+g7hAb6njAfubN9BlWauhAPvubSJ+ EoQzCUBAiF+iMhtVHGK7kVoQ4t6U+t0vMMzGEmivm3HCJX/TsTrlyMF76+oPoe1Cu3cG5tX1Fh2B B6Cc/Bq4SI3mpAO+Nsw= )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 11313 ncifcrf.gov. KjwJso+0JwE1kw/hX9tQ5+qzHegXvt+SAtwPgTwpoX29gA1ZDmEIrqBVNOkF5oxrc0QT95U6jwQC D8fdBm+8m7KRuLIqLW5NpPPpus7EUPtibEQRHjxBRMFd5Fn6eIKCDQ6fMxpgie+dEOjZX9WAiZI+ EiAHpcLpCv2Kc23k33Q= )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 26233 ncifcrf.gov. QemfCAkRvIM9nWzLGMdin1DPwKDHcXWiUOG7SK9t9YWKuo63BQnDioVTVDkleib2tu6OMgQjf7qG WJx/ItedFsf9WDNx7hDNYOahsVlQ3+xx50m71+0vooguh29ro3rWOg7CNzDjvNWEJOBCXMi5xMW5 qDTf45MsS2BMN5KW79S5/0KLEajxPkJCzQ94BSIZXWlUv5DCdDKx2wyqm+eyK2bjePoFukGDiOFY FwpLgG8TMIW33/Gjrb8yWH+VkcehZKqvDUmXXzYrU2w2/6t3uOmZBmcP3zqdyepUFjtCk6Cws5FD 8GWZxrgjqPzzSgxypBW6yfiZSJTKmHaLSA0SSw== )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 49455 ncifcrf.gov. eIimHYxjex8tie8KeOQmjoJ/mwVFIP5/LuW3LD1Z3a96GpRQnmHhCUSJQJx1iHh2OVxeYT4Q7iU3 VZOVr3bQKf/k6rwkZTonDXIToL5vVpJhY9D7UH9VBljNBzS/aU5rNe3RPZ7dF0bZw3Heozjc64wF 0C9GlrY7nWwV8rS2vdM= )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 58258 ncifcrf.gov. D01tDJxZIhNWJfIxDQmUI0RTJRQDQv+1NXJQaBwI890ySjeo3OGOi3ylf2Xjm0T5NOOSI5jZg8ei n1ZGvbKN1sL+i23/Z+TMBe2tW06phf/7vj5RbrCQyBnHjrYS5b/uDtt1JFvw4iSkuKSlcQ/SdU8+ g1J5B2RziMN5HsqQjMCagZAbOp7eoDx4+BfogS190ZOZBRhheKTZ6N/PCFL9iIiCaVBPZD4GI5EG mX68JA0HsG5Y50ZhzS22z4JpARLr0ZnWAcQicvePpxrt0/Vh971OxOgDK5518Uyp13VneASCqRcf 9yv0IuSg4sXxenM7FWyYRb1L6Vr6+y7sMX3dMQ== )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 60886 ncifcrf.gov. DNW/AIN0F2aA4YmHSJmwXx+mC+TiKk2t2BhYA5jzIDrloLXq7CmT12E68sPZka5mjGoEUZSedW5b KVr8wNKWMtmqe8r4hMTztwSFQd6MFACDnKUcE0Ldh4QPdAw5pJIQIp5/6iqq+4TNm9XSzOrW7Vu3 1awKw3pcn5DZYjI7eqOkj9GjGR0xHgFMiej16FqXzNTa4VORX5aHDCk1vBgl9wY1df7W2kONlAOD Wtv+wTLj7BcYopUpVb0SP5jqRCAQTmBRtF9TGJsHYghi3tosK2aEKXmsTrKoiqTl+HisSAxdha6J 8S5ARtdaF2xAAwsnOvbsWh0Ot5YnzhA+feN5wg== )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 64302 ncifcrf.gov. HYc/aildQTThsThsV6HNKtSF4fBTyQ4CMlMR2zuDlsQPTuZ9CV+VwHZRfDMEJQPlRNnoWkP3wy8b zE2VvOEDEboHXzgqTUnzB+VXfII+Bzq3g8J3rNFnAGIAiapr0yBtCHRSk/V1ozV84GzY9++9cpyA wGFE3Cz7H7FosxnxoeU= )`
	`ncifcrf.gov. 604800 IN RRSIG ( DNSKEY 5 2 604800 20201109054443 20201026054106 65491 ncifcrf.gov. EGEf230SS5Td1IbB7kC2FMtqFEcq5nGEK9Tn7ndmgyKD9f0AhYBpSrVrt/bNp4nLKFnxDhg5K9YD wIbRLfYneqw2v+B8pUsuyhsmOicUMdZuZ56v2ygMDvH6Xf28T5gYAVSN1jX8mFWFY6sA6+//6j7g vD08BDVAOn3SE5UR4Py6t6ePKozKDVwbW55xUmjPW3AYt/QnRe2CQxeh7zlVP8LD1jUxgr1D7RtR oJCEYTA9gadHpmCyPZ2mlSUHh7py7uxPthSSFEQMUHIXxNu3IUXAmoCPa0Qypn7SjZ+F69x3+Uwr vEUWCsRFi9fyVxvUGwky+7rnhR4CG7MyEroLLA== )`
	RRSIG=1230 and DNSKEY=1230 verifies the DNSKEY RRset
	RRSIG=3636 and DNSKEY=3636 verifies the DNSKEY RRset
	RRSIG=3906 and DNSKEY=3906 verifies the DNSKEY RRset
	RRSIG=6900 and DNSKEY=6900 verifies the DNSKEY RRset
	RRSIG=11313 and DNSKEY=11313 verifies the DNSKEY RRset
	RRSIG=26233 and DNSKEY=26233/SEP verifies the DNSKEY RRset
	RRSIG=49455 and DNSKEY=49455 verifies the DNSKEY RRset
	RRSIG=58258 and DNSKEY=58258/SEP verifies the DNSKEY RRset
	RRSIG=60886 and DNSKEY=60886/SEP verifies the DNSKEY RRset
	RRSIG=64302 and DNSKEY=64302 verifies the DNSKEY RRset
	RRSIG=65491 and DNSKEY=65491/SEP verifies the DNSKEY RRset
	DNSKEY=3636 is now in the chain-of-trust
	DNSKEY=11313 is now in the chain-of-trust
	DNSKEY=1230 is now in the chain-of-trust
	DNSKEY=49455 is now in the chain-of-trust
	DNSKEY=3906 is now in the chain-of-trust
	DNSKEY=64302 is now in the chain-of-trust
	DNSKEY=6900 is now in the chain-of-trust
	Query to ns.nih.GOV for NCIFCRF.GOV/A
	Received 1253 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (1253 bytes) ;; HEADER SECTION ;; id = 15390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN A ;; ANSWER SECTION (8 records) NCIFCRF.GOV. 3600 IN A 129.43.40.11 NCIFCRF.GOV. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 1230 ncifcrf.gov. uUhlx2UYwxTfppHE3mqwyEr3ioMFDtsoPYjbBIgYgR6j7c9ni69tSmvuqt/J59c+vMvgfQn6meyN ZYNSy/KfMU71CYFpT+wRwBBkbOxWegoxX7CJ/6cV3fuNzXKcSzMgKzlRdSz7Cen6eQM69g292ICO 8r1ytsg5loRqmmpmJYc= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 3636 ncifcrf.gov. Qm+QBZYJNLGt2dYO0llbNDj38pg4w5Vep84BDs7Jlmxt/PebCu5jG2jpWA85WMQLuouYqIVyPx3j AmxGxm78G5UepsOXaV2Jt939VL19Mo4emNPJHDqWt4fh9JmbhCNy2p5BIBEY33GNpsZWmftom4mO YzR9I3uuFRaj1jHL77Q= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 3906 ncifcrf.gov. VTGL6sle/ga424OGywriH4aXqww68JuKgb0lCrgEQVRl0uECJId5VcvRjLqrOOcu0BUkJOKj3y/w GkvPqXNbCDsyQ7KlDlYR9dZWAALbmih1XNdAxQoBz/jbBE7Aq0UeYgMnC0V2gXpiZjU8doaDC8px jdy0YbiOoR3hHNEScJ0= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 6900 ncifcrf.gov. C/xXx0Ij5oL0Bqjv24+3Ktw7D6KdII53Esc1Er701bdVMRr1Y6SyLEvQs3EYCx6BMX1phJgUnw0l CpOXCupxNAO/n2JKmp7UnmRI5v39YCvUBSPgeRLpQLZD1/333LCVB7OQI9q8yibwdzLqCRAaLX5T 1Z6uYavRkEbEFAGbN48= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 11313 ncifcrf.gov. FG5jWHx3zeRROiEqYcumgwQd4afX8p59DP5oo3NG1uNljR5pVi0vSWrIzAEOIfLV5QLbrUZwY+TR 7bzAQV8nos6lJoz2pf22JfFfKzt2RUL0xIj62df2ysjcwISb3qtCAS+JSnUkBKMUW7kGuFNTrNne qFp/c2kC+fwuQaQLC2Q= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 49455 ncifcrf.gov. BzK5VFv12iI3e/ac5riOGg5feCYJg1m60CqSAsl8i/2+wmpSKVuuPqjWONMqiHdOzsulPbB8F6EB ETq9ri5xJRHH3i96q7j08L/LlYRxQdP/NJjpWRTzr9rzaoWfDImaBBF3th4dLpjIyUc01sBtztDQ W4ggc0XLZbbsDCYtLkc= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 64302 ncifcrf.gov. ZyP55B5cxsqC4xxzM8uGtArlbVtOWj1ygpsvYeMyiKXP3PrBo14WmfFyaTzW+2jlEZvRap8NSqgS 02ZqlGoRv7Rplh2FllNOQ0tD2bDAUmhvPMuwDa6Xm6mw8FTgJL9461UGAfX87sW7ZlOybtcGUhWb 10G8FswYSq36R1PulJ0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NCIFCRF.GOV is authoritative for NCIFCRF.GOV
	Found RRSIG signed by ncifcrf.gov zone
	Query to ns3.nih.GOV for NCIFCRF.GOV/SOA
	Received 1293 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (1293 bytes) ;; HEADER SECTION ;; id = 45157 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN SOA ;; ANSWER SECTION (8 records) NCIFCRF.GOV. 3600 IN SOA ( ns.nih.GOV. ed\.krusinski.nih.GOV. 85579554 ;serial 3600 ;refresh 360 ;retry 1209600 ;expire 3600 ;minimum ) NCIFCRF.GOV. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 1230 ncifcrf.gov. w2QfO3L4xL4x4aZUmCiVHZyfQbUORWsaLAwGRgDVGemXlV9tE70vG92vvcKgbcxNmqT+E3M43ZOs NT5GxQEw/hHid8Ryb2Ejl8Vin0EkOsMiW3ve+0OgN71I5rPs2xevVL9VdUPfUzfBWJ+DN1OAr3Sz flibXXLEzMJ57UK9NwI= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 3636 ncifcrf.gov. bWd9SmAARerhcQt2eifOhdjwZn4oOdl3JGfiPVnxGpYwNaxESEhDMqqJ0klJgrEHiOv+iWkKXcTK DECI3GiaIKRG2RJ710T3EtP8DQfQtL8oATyK0OyqSGnOdilQyoghJJaa6Mhx9BSrMWAdbgahHd84 8wOybfuYXqax+9MMrJM= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 3906 ncifcrf.gov. CaeUVnTBHgqknrJVxTBhu33Nai2ztUobk9RNIKPwPt/5c5d8cer6sE6XTwlcMltE7OEvFR2q6vGr VXPgPa3xrI3PnsOnVYpDn5ZdnFOE9iFSjKzbTHkUSAyrPdWrKADNn46uf6aQ+vrBmZsQao4lXzHM 37x2fOftNrhDNEMAAEI= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 6900 ncifcrf.gov. mV+DSmzxp5HCyoD6wqULBgGh6dE8ewzgSd4fEy0QRhiHtFND9PZWckCkBGKH8rLmxGd43MYoz/+w SnJu1kt8A1f0YaftV2nZ7UcJTYdeQ/8hh2iKhg8LjjhtBT2WkYBrECFYwscKm8JCWlQuhKOi2rhg b7Ce7UBECqoeYvu1Xhg= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 11313 ncifcrf.gov. vOEPf5ePzBXrjwLNTF7SuR1F3+1gaUgCupPTYAaZYmpyYBqWb6sGaSJd1vLdcSFBhbfTKspKVqn6 X2rRMSWuzUpzRvaPcfWBCI5HPaJSMiMoWtrwGSxl0hBLbDUgaMdYoJlIhsAGHFvsYP+CtHwJfRjX J2WmjfYHoNURLQ0bllo= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 49455 ncifcrf.gov. IPKYHN+TIDInBBOjff/A7kjvBwJhO7S1RT4Ll8kXXJRB4DVYnQGHuk7HU7rjZ0vCB+qVBgE8OfrG UjaRFlXRq2jLNT5bjamANUXlUqO6OrdT7qsfF5cI9P0flFOC6ULiUkHJrdsqpHj7VnPl4YNLjRCb ISzgrMcUxlYQa3soqXU= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 64302 ncifcrf.gov. q/r3Oa/9G+oKHinUdhvrD4ksDHPnFjlrjnPcL+LcRyGa/Aik/R6lbNZMQb4e2n3yfPLObl9zWZJn ljllJicyAJaCcVtKJoGxm+C0wBYX/XwRnpMnj5sIYNjEfF2lbrJbUMYHTe+iToGaSWwgxTOKOkoh PKFKgM8VJ/0HYmJPRQo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.nih.GOV for NCIFCRF.GOV/SOA
	Received 1293 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (1293 bytes) ;; HEADER SECTION ;; id = 3700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN SOA ;; ANSWER SECTION (8 records) NCIFCRF.GOV. 3600 IN SOA ( ns.nih.GOV. ed\.krusinski.nih.GOV. 85579554 ;serial 3600 ;refresh 360 ;retry 1209600 ;expire 3600 ;minimum ) NCIFCRF.GOV. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 1230 ncifcrf.gov. w2QfO3L4xL4x4aZUmCiVHZyfQbUORWsaLAwGRgDVGemXlV9tE70vG92vvcKgbcxNmqT+E3M43ZOs NT5GxQEw/hHid8Ryb2Ejl8Vin0EkOsMiW3ve+0OgN71I5rPs2xevVL9VdUPfUzfBWJ+DN1OAr3Sz flibXXLEzMJ57UK9NwI= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 3636 ncifcrf.gov. bWd9SmAARerhcQt2eifOhdjwZn4oOdl3JGfiPVnxGpYwNaxESEhDMqqJ0klJgrEHiOv+iWkKXcTK DECI3GiaIKRG2RJ710T3EtP8DQfQtL8oATyK0OyqSGnOdilQyoghJJaa6Mhx9BSrMWAdbgahHd84 8wOybfuYXqax+9MMrJM= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 3906 ncifcrf.gov. CaeUVnTBHgqknrJVxTBhu33Nai2ztUobk9RNIKPwPt/5c5d8cer6sE6XTwlcMltE7OEvFR2q6vGr VXPgPa3xrI3PnsOnVYpDn5ZdnFOE9iFSjKzbTHkUSAyrPdWrKADNn46uf6aQ+vrBmZsQao4lXzHM 37x2fOftNrhDNEMAAEI= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 6900 ncifcrf.gov. mV+DSmzxp5HCyoD6wqULBgGh6dE8ewzgSd4fEy0QRhiHtFND9PZWckCkBGKH8rLmxGd43MYoz/+w SnJu1kt8A1f0YaftV2nZ7UcJTYdeQ/8hh2iKhg8LjjhtBT2WkYBrECFYwscKm8JCWlQuhKOi2rhg b7Ce7UBECqoeYvu1Xhg= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 11313 ncifcrf.gov. vOEPf5ePzBXrjwLNTF7SuR1F3+1gaUgCupPTYAaZYmpyYBqWb6sGaSJd1vLdcSFBhbfTKspKVqn6 X2rRMSWuzUpzRvaPcfWBCI5HPaJSMiMoWtrwGSxl0hBLbDUgaMdYoJlIhsAGHFvsYP+CtHwJfRjX J2WmjfYHoNURLQ0bllo= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 49455 ncifcrf.gov. IPKYHN+TIDInBBOjff/A7kjvBwJhO7S1RT4Ll8kXXJRB4DVYnQGHuk7HU7rjZ0vCB+qVBgE8OfrG UjaRFlXRq2jLNT5bjamANUXlUqO6OrdT7qsfF5cI9P0flFOC6ULiUkHJrdsqpHj7VnPl4YNLjRCb ISzgrMcUxlYQa3soqXU= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 64302 ncifcrf.gov. q/r3Oa/9G+oKHinUdhvrD4ksDHPnFjlrjnPcL+LcRyGa/Aik/R6lbNZMQb4e2n3yfPLObl9zWZJn ljllJicyAJaCcVtKJoGxm+C0wBYX/XwRnpMnj5sIYNjEfF2lbrJbUMYHTe+iToGaSWwgxTOKOkoh PKFKgM8VJ/0HYmJPRQo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nih.GOV for NCIFCRF.GOV/SOA
	Received 1293 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (1293 bytes) ;; HEADER SECTION ;; id = 63827 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN SOA ;; ANSWER SECTION (8 records) NCIFCRF.GOV. 3600 IN SOA ( ns.nih.GOV. ed\.krusinski.nih.GOV. 85579554 ;serial 3600 ;refresh 360 ;retry 1209600 ;expire 3600 ;minimum ) NCIFCRF.GOV. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 1230 ncifcrf.gov. w2QfO3L4xL4x4aZUmCiVHZyfQbUORWsaLAwGRgDVGemXlV9tE70vG92vvcKgbcxNmqT+E3M43ZOs NT5GxQEw/hHid8Ryb2Ejl8Vin0EkOsMiW3ve+0OgN71I5rPs2xevVL9VdUPfUzfBWJ+DN1OAr3Sz flibXXLEzMJ57UK9NwI= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 3636 ncifcrf.gov. bWd9SmAARerhcQt2eifOhdjwZn4oOdl3JGfiPVnxGpYwNaxESEhDMqqJ0klJgrEHiOv+iWkKXcTK DECI3GiaIKRG2RJ710T3EtP8DQfQtL8oATyK0OyqSGnOdilQyoghJJaa6Mhx9BSrMWAdbgahHd84 8wOybfuYXqax+9MMrJM= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 3906 ncifcrf.gov. CaeUVnTBHgqknrJVxTBhu33Nai2ztUobk9RNIKPwPt/5c5d8cer6sE6XTwlcMltE7OEvFR2q6vGr VXPgPa3xrI3PnsOnVYpDn5ZdnFOE9iFSjKzbTHkUSAyrPdWrKADNn46uf6aQ+vrBmZsQao4lXzHM 37x2fOftNrhDNEMAAEI= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 6900 ncifcrf.gov. mV+DSmzxp5HCyoD6wqULBgGh6dE8ewzgSd4fEy0QRhiHtFND9PZWckCkBGKH8rLmxGd43MYoz/+w SnJu1kt8A1f0YaftV2nZ7UcJTYdeQ/8hh2iKhg8LjjhtBT2WkYBrECFYwscKm8JCWlQuhKOi2rhg b7Ce7UBECqoeYvu1Xhg= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 11313 ncifcrf.gov. vOEPf5ePzBXrjwLNTF7SuR1F3+1gaUgCupPTYAaZYmpyYBqWb6sGaSJd1vLdcSFBhbfTKspKVqn6 X2rRMSWuzUpzRvaPcfWBCI5HPaJSMiMoWtrwGSxl0hBLbDUgaMdYoJlIhsAGHFvsYP+CtHwJfRjX J2WmjfYHoNURLQ0bllo= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 49455 ncifcrf.gov. IPKYHN+TIDInBBOjff/A7kjvBwJhO7S1RT4Ll8kXXJRB4DVYnQGHuk7HU7rjZ0vCB+qVBgE8OfrG UjaRFlXRq2jLNT5bjamANUXlUqO6OrdT7qsfF5cI9P0flFOC6ULiUkHJrdsqpHj7VnPl4YNLjRCb ISzgrMcUxlYQa3soqXU= ) ncifcrf.gov. 3600 IN RRSIG ( SOA 5 2 3600 20201111001618 20201027231618 64302 ncifcrf.gov. q/r3Oa/9G+oKHinUdhvrD4ksDHPnFjlrjnPcL+LcRyGa/Aik/R6lbNZMQb4e2n3yfPLObl9zWZJn ljllJicyAJaCcVtKJoGxm+C0wBYX/XwRnpMnj5sIYNjEfF2lbrJbUMYHTe+iToGaSWwgxTOKOkoh PKFKgM8VJ/0HYmJPRQo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.nih.GOV for NCIFCRF.GOV/A
	Received 1253 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (1253 bytes) ;; HEADER SECTION ;; id = 46044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NCIFCRF.GOV. IN A ;; ANSWER SECTION (8 records) NCIFCRF.GOV. 3600 IN A 129.43.40.11 NCIFCRF.GOV. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 1230 ncifcrf.gov. uUhlx2UYwxTfppHE3mqwyEr3ioMFDtsoPYjbBIgYgR6j7c9ni69tSmvuqt/J59c+vMvgfQn6meyN ZYNSy/KfMU71CYFpT+wRwBBkbOxWegoxX7CJ/6cV3fuNzXKcSzMgKzlRdSz7Cen6eQM69g292ICO 8r1ytsg5loRqmmpmJYc= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 3636 ncifcrf.gov. Qm+QBZYJNLGt2dYO0llbNDj38pg4w5Vep84BDs7Jlmxt/PebCu5jG2jpWA85WMQLuouYqIVyPx3j AmxGxm78G5UepsOXaV2Jt939VL19Mo4emNPJHDqWt4fh9JmbhCNy2p5BIBEY33GNpsZWmftom4mO YzR9I3uuFRaj1jHL77Q= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 3906 ncifcrf.gov. VTGL6sle/ga424OGywriH4aXqww68JuKgb0lCrgEQVRl0uECJId5VcvRjLqrOOcu0BUkJOKj3y/w GkvPqXNbCDsyQ7KlDlYR9dZWAALbmih1XNdAxQoBz/jbBE7Aq0UeYgMnC0V2gXpiZjU8doaDC8px jdy0YbiOoR3hHNEScJ0= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 6900 ncifcrf.gov. C/xXx0Ij5oL0Bqjv24+3Ktw7D6KdII53Esc1Er701bdVMRr1Y6SyLEvQs3EYCx6BMX1phJgUnw0l CpOXCupxNAO/n2JKmp7UnmRI5v39YCvUBSPgeRLpQLZD1/333LCVB7OQI9q8yibwdzLqCRAaLX5T 1Z6uYavRkEbEFAGbN48= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 11313 ncifcrf.gov. FG5jWHx3zeRROiEqYcumgwQd4afX8p59DP5oo3NG1uNljR5pVi0vSWrIzAEOIfLV5QLbrUZwY+TR 7bzAQV8nos6lJoz2pf22JfFfKzt2RUL0xIj62df2ysjcwISb3qtCAS+JSnUkBKMUW7kGuFNTrNne qFp/c2kC+fwuQaQLC2Q= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 49455 ncifcrf.gov. BzK5VFv12iI3e/ac5riOGg5feCYJg1m60CqSAsl8i/2+wmpSKVuuPqjWONMqiHdOzsulPbB8F6EB ETq9ri5xJRHH3i96q7j08L/LlYRxQdP/NJjpWRTzr9rzaoWfDImaBBF3th4dLpjIyUc01sBtztDQ W4ggc0XLZbbsDCYtLkc= ) ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 64302 ncifcrf.gov. ZyP55B5cxsqC4xxzM8uGtArlbVtOWj1ygpsvYeMyiKXP3PrBo14WmfFyaTzW+2jlEZvRap8NSqgS 02ZqlGoRv7Rplh2FllNOQ0tD2bDAUmhvPMuwDa6Xm6mw8FTgJL9461UGAfX87sW7ZlOybtcGUhWb 10G8FswYSq36R1PulJ0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NCIFCRF.GOV A RR has value 129.43.40.11
	Found 7 RRSIGs over A RRset
	`NCIFCRF.GOV. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 1230 ncifcrf.gov. uUhlx2UYwxTfppHE3mqwyEr3ioMFDtsoPYjbBIgYgR6j7c9ni69tSmvuqt/J59c+vMvgfQn6meyN ZYNSy/KfMU71CYFpT+wRwBBkbOxWegoxX7CJ/6cV3fuNzXKcSzMgKzlRdSz7Cen6eQM69g292ICO 8r1ytsg5loRqmmpmJYc= )`
	`ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 3636 ncifcrf.gov. Qm+QBZYJNLGt2dYO0llbNDj38pg4w5Vep84BDs7Jlmxt/PebCu5jG2jpWA85WMQLuouYqIVyPx3j AmxGxm78G5UepsOXaV2Jt939VL19Mo4emNPJHDqWt4fh9JmbhCNy2p5BIBEY33GNpsZWmftom4mO YzR9I3uuFRaj1jHL77Q= )`
	`ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 3906 ncifcrf.gov. VTGL6sle/ga424OGywriH4aXqww68JuKgb0lCrgEQVRl0uECJId5VcvRjLqrOOcu0BUkJOKj3y/w GkvPqXNbCDsyQ7KlDlYR9dZWAALbmih1XNdAxQoBz/jbBE7Aq0UeYgMnC0V2gXpiZjU8doaDC8px jdy0YbiOoR3hHNEScJ0= )`
	`ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 6900 ncifcrf.gov. C/xXx0Ij5oL0Bqjv24+3Ktw7D6KdII53Esc1Er701bdVMRr1Y6SyLEvQs3EYCx6BMX1phJgUnw0l CpOXCupxNAO/n2JKmp7UnmRI5v39YCvUBSPgeRLpQLZD1/333LCVB7OQI9q8yibwdzLqCRAaLX5T 1Z6uYavRkEbEFAGbN48= )`
	`ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 11313 ncifcrf.gov. FG5jWHx3zeRROiEqYcumgwQd4afX8p59DP5oo3NG1uNljR5pVi0vSWrIzAEOIfLV5QLbrUZwY+TR 7bzAQV8nos6lJoz2pf22JfFfKzt2RUL0xIj62df2ysjcwISb3qtCAS+JSnUkBKMUW7kGuFNTrNne qFp/c2kC+fwuQaQLC2Q= )`
	`ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 49455 ncifcrf.gov. BzK5VFv12iI3e/ac5riOGg5feCYJg1m60CqSAsl8i/2+wmpSKVuuPqjWONMqiHdOzsulPbB8F6EB ETq9ri5xJRHH3i96q7j08L/LlYRxQdP/NJjpWRTzr9rzaoWfDImaBBF3th4dLpjIyUc01sBtztDQ W4ggc0XLZbbsDCYtLkc= )`
	`ncifcrf.gov. 3600 IN RRSIG ( A 5 2 3600 20201109094232 20201026091325 64302 ncifcrf.gov. ZyP55B5cxsqC4xxzM8uGtArlbVtOWj1ygpsvYeMyiKXP3PrBo14WmfFyaTzW+2jlEZvRap8NSqgS 02ZqlGoRv7Rplh2FllNOQ0tD2bDAUmhvPMuwDa6Xm6mw8FTgJL9461UGAfX87sW7ZlOybtcGUhWb 10G8FswYSq36R1PulJ0= )`
	RRSIG=1230 and DNSKEY=1230 verifies the A RRset
	RRSIG=3636 and DNSKEY=3636 verifies the A RRset
	RRSIG=3906 and DNSKEY=3906 verifies the A RRset
	RRSIG=6900 and DNSKEY=6900 verifies the A RRset
	RRSIG=11313 and DNSKEY=11313 verifies the A RRset
	RRSIG=49455 and DNSKEY=49455 verifies the A RRset
	RRSIG=64302 and DNSKEY=64302 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NCIFCRF.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: