DNSSEC Debugger

Domain Name:

Time: 2025-09-17 05:14:53 UTC

Analyzing DNSSEC problems for NGA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1414 octets ;; HEADER SECTION ;; id = 50721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 65535, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to d.root-servers.net for NGA.GOV/A
	Received 614 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 614 octets ;; HEADER SECTION ;; id = 28295 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20250929200000 20250916190000 46441 . H4WYd31Du8/JY7wSmBEVMJYnedNoFyshlhTzbvIki7cJJInA5cFbx/TlFwLC0z8r0HUn5tzRR6Qy 8eKu3sfnXfhUYHY3AZQ1eefXH1vMx12Q289BWO31FY+jp2nibEXv7Xj+xIupKKCFXw4z/Hj1AKuO SMm5eOv5KeJeN9KZo6ZSnjspKnRjsEkeSzjv755X/SGT8Z/uRYdLhdh9KedmNLkeJuLFqY+pejcE mwbXUrjG550U1elx0HxXielOmhSzJx/K132/QL27WwWYFWm+xw3HhKukMwHakjL9wvl8akLHX1BT w3KHL6sqHMGiBz2PlXPbzuaTKsX1pPPNDUz+zQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 610 octets ;; HEADER SECTION ;; id = 11513 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20250929200000 20250916190000 46441 . H4WYd31Du8/JY7wSmBEVMJYnedNoFyshlhTzbvIki7cJJInA5cFbx/TlFwLC0z8r0HUn5tzRR6Qy 8eKu3sfnXfhUYHY3AZQ1eefXH1vMx12Q289BWO31FY+jp2nibEXv7Xj+xIupKKCFXw4z/Hj1AKuO SMm5eOv5KeJeN9KZo6ZSnjspKnRjsEkeSzjv755X/SGT8Z/uRYdLhdh9KedmNLkeJuLFqY+pejcE mwbXUrjG550U1elx0HxXielOmhSzJx/K132/QL27WwWYFWm+xw3HhKukMwHakjL9wvl8akLHX1BT w3KHL6sqHMGiBz2PlXPbzuaTKsX1pPPNDUz+zQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 370 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 370 octets ;; HEADER SECTION ;; id = 43783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250929200000 20250916190000 46441 . H4WYd31Du8/JY7wSmBEVMJYnedNoFyshlhTzbvIki7cJJInA5cFbx/TlFwLC0z8r0HUn5tzRR6Qy 8eKu3sfnXfhUYHY3AZQ1eefXH1vMx12Q289BWO31FY+jp2nibEXv7Xj+xIupKKCFXw4z/Hj1AKuO SMm5eOv5KeJeN9KZo6ZSnjspKnRjsEkeSzjv755X/SGT8Z/uRYdLhdh9KedmNLkeJuLFqY+pejcE mwbXUrjG550U1elx0HxXielOmhSzJx/K132/QL27WwWYFWm+xw3HhKukMwHakjL9wvl8akLHX1BT w3KHL6sqHMGiBz2PlXPbzuaTKsX1pPPNDUz+zQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20250929200000 20250916190000 46441 . H4WYd31Du8/JY7wSmBEVMJYnedNoFyshlhTzbvIki7cJJInA5cFbx/TlFwLC0z8r0HUn5tzRR6Qy 8eKu3sfnXfhUYHY3AZQ1eefXH1vMx12Q289BWO31FY+jp2nibEXv7Xj+xIupKKCFXw4z/Hj1AKuO SMm5eOv5KeJeN9KZo6ZSnjspKnRjsEkeSzjv755X/SGT8Z/uRYdLhdh9KedmNLkeJuLFqY+pejcE mwbXUrjG550U1elx0HxXielOmhSzJx/K132/QL27WwWYFWm+xw3HhKukMwHakjL9wvl8akLHX1BT w3KHL6sqHMGiBz2PlXPbzuaTKsX1pPPNDUz+zQ== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 54432 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251101110613 20250901110613 2536 gov. D1H2/lQxqi95pn45IcLLiEhJqLj7xvGsuBj73AYEAzqX48/P7GQMRCj7rQAOTEwKoZaj70cVbIvD dPV4T5L9mw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251101110613 20250901110613 2536 gov. D1H2/lQxqi95pn45IcLLiEhJqLj7xvGsuBj73AYEAzqX48/P7GQMRCj7rQAOTEwKoZaj70cVbIvD dPV4T5L9mw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.GOV for NGA.GOV/A
	Received 358 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 358 octets ;; HEADER SECTION ;; id = 10547 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NGA.GOV. 10800 IN NS auth1.dns.rcn.net. NGA.GOV. 10800 IN NS auth2.dns.rcn.net. NGA.GOV. 10800 IN NS auth3.dns.rcn.net. NGA.GOV. 10800 IN NS auth4.dns.rcn.net. NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 ) NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250918061454 20250916041454 35496 gov. 7OG3wUeGsdZiKBSZd38y4sC8mBq8p+B4Zf3XziA7x1cBDvURO2yVAbqAsY1aFVR2lQWOK4Lmx1GH PLf0eNKX8g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.GOV for NGA.GOV/DNSKEY
	Received 358 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 358 octets ;; HEADER SECTION ;; id = 15149 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NGA.GOV. 10800 IN NS auth1.dns.rcn.net. NGA.GOV. 10800 IN NS auth2.dns.rcn.net. NGA.GOV. 10800 IN NS auth3.dns.rcn.net. NGA.GOV. 10800 IN NS auth4.dns.rcn.net. NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 ) NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250918061454 20250916041454 35496 gov. uPzrqJ7vFzLiFrbtyk6SDQLhuHw4Qq8cDgW9Td0sKQky9q4SKBXx5+ufuK6omFILJ2jhyPnyqo/U wKHRUyU0+g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone NGA.GOV

NGA.GOV

	Checking DS between GOV and NGA.GOV
	Query to b.ns.GOV for NGA.GOV/DS
	Received 267 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 267 octets ;; HEADER SECTION ;; id = 44651 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DS ;; ANSWER SECTION (4 records) NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 ) NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250918061454 20250916041454 35496 gov. EMTV+Go5MiBSQo8KMl3Fvvzt5EBfr1tzZX7+c20zFE7jttqvbe4amXZ4fWUJhme2l45pA5OTfvvE LJkK3fM5DA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for NGA.GOV in the GOV zone
	DS=56044/SHA-1 uses a deprecated digest algorithm
	DS=56044/SHA-1 has algorithm RSASHA1
	DS=56044/SHA-256 has algorithm RSASHA1
	DS=57335/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20250918061454 20250916041454 35496 gov. EMTV+Go5MiBSQo8KMl3Fvvzt5EBfr1tzZX7+c20zFE7jttqvbe4amXZ4fWUJhme2l45pA5OTfvvE LJkK3fM5DA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=56044/SHA-1 is now in the chain-of-trust
	DS=57335/SHA-256 is now in the chain-of-trust
	`NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb`
	`NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b )`
	`NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 )`
	Query to auth2.dns.rcn.net for NGA.GOV/DNSKEY
	Received 2957 bytes from 207.172.11.14
	;; Response received from [207.172.11.14] 2957 octets ;; HEADER SECTION ;; id = 22117 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 12 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DNSKEY ;; ANSWER SECTION (12 records) nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAb3N2AAyjpJA74Voxc4/M20Gbsn5v5busCVF1OHDNfr3eG8Zxd7plIw5MXUhJ0nj6HIxUUMp OC1n9jrmbVbKL0GJw2ghD4D1/W/GL3Y+GarDqXq8Z69v2PYvLemGWGMzKtGkMWMp6Jpad/09dL78 WTzMPQoJIS91HbkPC3mr+aEEI9QcZaHep2vgOk6RyDZ8/xA9xhE4TPaHkIo/ZZXbJsTYkV3oGovK OdQ5ViIK14kkQKHRA0ZJuZeEG6x/OxCVGB+v5fhh2bNjTREYiOVPMxZ/dCaEm3oG+jiBUcWrIDXu 2HNhGStb900l4Bl9aaSVW8OzgECe/EZ74+l91Nqnik0= ) ; keytag 42536 nga.gov. 3600 IN DNSKEY ( 257 3 5 AwEAAc90oZMsHfZtGEH5KZiFsk79IIipFEOouNs5V0i4V93TOz5m37n8A+Go9B+DwKEBd5tufgYH sdP6U26xzpbL7PLGFzbc35dVN4SkYO5qke7FZC8wUwUw8cWvn4WtdjXKZ/XYtn6XHN2UUHnr53yG 64Hk9HVJQfvj9sR8unX2G0Mz ) ; keytag 56044 nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAahwrof4GXQaRQd+yxZTBZno1u1xgWisP5KPlLm0pd5SEey0LjxL8MS2Cn7lZczaKay60Tvw WSQg9lxV5bINebHIADztBZXNdTPTR3DnJah8+oWN3lTdbq4rdvIo/2omJNfttmIv88Osmdy1Zki7 cZQBnyDKBJORV5xcH3YyqYHGPj1dYPtBC2gJpaNc/1rX4sUtnIU+Zs2KRw5mrkmqxdNij0TalTpm YYz8QP8Cg8P9R+8yXaW7FbAtrMu+OdDSwlIX97gc6pTTwluGtCZo8eKOh8aQc/AUFOCclAWduSun rgrt6T/cfhD2ijQh+XyqFTrT6SRbAZ876iShSovEjW0= ) ; keytag 10338 nga.gov. 3600 IN DNSKEY ( 256 3 5 AwEAAcN5y9fDRhxcFJf047QSYM1W1COPqCD4trFxGjLnwA0XbyCr8RsV30RtJeWtUXL7JY6COGUW FbXSWXsUB4rceOhyR4SRHXUfBvAjdnHejMuuGYi4qhWq2Jtxk2xrshFSIrLM5+J0K2ZAEMru2NWz ppf35txyWLNaBhCAPj8HwnW1 ) ; keytag 21537 nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAeUqBZ61PIDxkxyahFFfvDXA8uiwpaBqUnnv8+igiut8+7dwVW4OvavhQ2sYJWyg+OhwG3hi M+0w8p9kF3JbW7XLyQTF+lTjwnoN9f6uz34rWf2bZV5sT7G/ZDO59Ka/1xEjQRY8ihwPsou4p2jB T1EEAkXCw2N+bAhxfHDbqxJVzonvUo80bLt1WUmc7CfN0pYi3llk2jYCSAfm0PEppxWP3XtBM7Q6 V63Th5U8OhvDTpKGpI4HfvbGvCp8+P29u0T2eLqwZF6VSdEtZCP+C0/DI1K9f8fL8Oe9rlJPO+zL gWgVXhRMUe7VbT+MqYoNBjU8GiWVxDomgMyuugOnBtk= ) ; keytag 65355 nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaaY9IZGZRI1+OTBniuS+GUg8UNGwa9EYnrRpKldXQwDhyLjeT1Hs3AV3r6f+INA+sxbqZbd NCc8XcP3P/PP1RP1cGrS64a1veRERc9Bgf/T3ZxbrffukaVsBrh93BRJt7xle9nhUCXsXmy5X5W7 T3RWZjz+n/+f9yBtvdMwIhuRtIYhpSjG57mGFq199XGgp0P+LbIYXw6+8B/8OFhOIaxrKO5La61B 9hTwwKJ3Us8G7quqnLcjg7kwfWrfuFW//zORQQvJ63y60vnQ2iVeyyNmN/bXr9t0ynmnme6ptaWU GVdr8oEBoXV97ZFgl7/Qt1kzztjURiQg4kBfpvxT8VM= ) ; keytag 57335 nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20251017040357 20250917040357 21537 nga.gov. HuU3redtkfyxEnuE4yWlCjA1XcyxybguKVUwAb9ENvyXzLC7Ah2/0AYX0zrbIdrr5iU4d00RKjsl zHxEnQDXDyHh9CxGw6TVOpr2p5kEyI4G1ut+JLxb93NJlSFIyooksjQ2pqj7iY2pBhOAPIa4Ww1+ HsijlwSRj8fzwhgrHsA= ) nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20251017040357 20250917040357 56044 nga.gov. TxQoH0WrpdNd1k10f/4isXwxq3UkZeXEjjleYY8LvxPBbHHoIR3dubGIPm28DxKDnbOkGfYZQVi2 ykeEbjXBTksL6rSvHdfodtDPOMJUTiBhczyL/ksm8AyinjDmqbxriSpiVYm7K6yPnflPxFHPhS1/ v5+jTQyJiwm+Rc6mrxk= ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251017040357 20250917040357 10338 nga.gov. g6Jz3nW6GPv2iLkdyehn3cN5VKpOJPqNslOSLyJXg2OVwFq0N5VMv8+JFYnNUgNhP84R6e/ZCrNm Uq0EKg1V0Y28NAHDJ5jKlvGEL1TubYvaJloLDkrINzWmfqiEvoZRzHvR3OJLM0kMtnhcVunh8xXL x49BzIUaQw/e1pW9H4v1STbxzPHs54IymrOlw7hm5rQ3Z6KyunzNMcYFp+P2jCmuyae2RmUDpeHX orgCoOiHOWwNmsWT9JGiPwwPQroqjSjFece6rVtcIxbl0Vt2tNuLoJMkeI7TYA5ISYGkh3yFFtv9 ubBSjtKdn8A+TY8Lq1aE2Qa2lWL8nHdPw+GxsA== ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251017040357 20250917040357 42536 nga.gov. TAouhkZisitglUnIB5oRK4sZ2YVkvtacG3YnhpFYqx1dQKUrsY7/TISGt8mtkARJ1ZGclEM/ojMD h+tzFcwuc03SGrFg3Psgvb2bh8T4jjNK0KEUWq2di+ABnAA8DRJeRNwhiGyd6kyIG3O9AvNXJ4Ch 9KyDQRFOL2lMWzJZJ6eLYT+rQj5tgr3Iv42J52vYVUyg3BNA06GSF7McS+3UfXw21jlssaf+upzZ rmNsaSkl2IYekJHhLOr1a6BCclsfccs0K+MI3w+LM8fhEdj7DQYzIWGZeayI0uPQhXp35Qj0dKkI IrB7M9PnnjX+N24MxQmOOVQlu+IqfXgTo7G8gw== ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251017040357 20250917040357 57335 nga.gov. comfSVovpECzhaq+98MboXxP+XtSsibwPO9rSOCiKfzHqxsXu5rF5aj1Go2RBcaPIl4TYLOdOXFo cqRq85sUh3VW7oV9kUe/NJ5LtyJizQVx4+oHwsyk1OTpCvpv7mf+CSawPjyhQ6pHxzi0xOKrCI1+ UYbCuAzSpy6mXTqPrH39MoQQIuKsqegX65EyOZTDWzuNUOAGzzrmnZviysugkFq5GwBAU/UBJWgn XJ6UwbJCAoK81XgaG0CN49JtrnHdh3DKVaFuagjK1643bbA1sboovpStH12HH4zuIJ1FsongsD4n LdmrCoVoR0ItL0R7wg0Dj4DkKEImvUjKvYNVuw== ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251017040357 20250917040357 65355 nga.gov. zH+89drowpxcP7MKh7TAXV/pCvtDLG0oquno63Fx34mwKrCACBJEnCVQEO81VRtyfLBsbbaId7YP oGTL+wAnga8OoNIs7y4+PWP9/TaZcC672Ci1LotQISe7oFgjoamtKRTaLQCXkGitFXMGJ1wIl4zW KuJ0c0ZnM7jIgIWOTb61cTAzCP/1Rorewgn3LqsEGFpBu/ObRkEm5p4zUt5s+qCruKaWHnp9AAOm N8fxBYU9lKBQXZJkUs/l2AXQlgckJHiBCaehyxamgj5qfzNrrcYT6kQbkd88zZMvdu/MShR98hr4 GAP4Y1N5gSk9NxwfXPIbIOrNnYmC2hOlT61baQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 6 DNSKEY records for NGA.GOV
	`nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAb3N2AAyjpJA74Voxc4/M20Gbsn5v5busCVF1OHDNfr3eG8Zxd7plIw5MXUhJ0nj6HIxUUMp OC1n9jrmbVbKL0GJw2ghD4D1/W/GL3Y+GarDqXq8Z69v2PYvLemGWGMzKtGkMWMp6Jpad/09dL78 WTzMPQoJIS91HbkPC3mr+aEEI9QcZaHep2vgOk6RyDZ8/xA9xhE4TPaHkIo/ZZXbJsTYkV3oGovK OdQ5ViIK14kkQKHRA0ZJuZeEG6x/OxCVGB+v5fhh2bNjTREYiOVPMxZ/dCaEm3oG+jiBUcWrIDXu 2HNhGStb900l4Bl9aaSVW8OzgECe/EZ74+l91Nqnik0= ) ; keytag 42536`
	`nga.gov. 3600 IN DNSKEY ( 257 3 5 AwEAAc90oZMsHfZtGEH5KZiFsk79IIipFEOouNs5V0i4V93TOz5m37n8A+Go9B+DwKEBd5tufgYH sdP6U26xzpbL7PLGFzbc35dVN4SkYO5qke7FZC8wUwUw8cWvn4WtdjXKZ/XYtn6XHN2UUHnr53yG 64Hk9HVJQfvj9sR8unX2G0Mz ) ; keytag 56044`
	`nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAahwrof4GXQaRQd+yxZTBZno1u1xgWisP5KPlLm0pd5SEey0LjxL8MS2Cn7lZczaKay60Tvw WSQg9lxV5bINebHIADztBZXNdTPTR3DnJah8+oWN3lTdbq4rdvIo/2omJNfttmIv88Osmdy1Zki7 cZQBnyDKBJORV5xcH3YyqYHGPj1dYPtBC2gJpaNc/1rX4sUtnIU+Zs2KRw5mrkmqxdNij0TalTpm YYz8QP8Cg8P9R+8yXaW7FbAtrMu+OdDSwlIX97gc6pTTwluGtCZo8eKOh8aQc/AUFOCclAWduSun rgrt6T/cfhD2ijQh+XyqFTrT6SRbAZ876iShSovEjW0= ) ; keytag 10338`
	`nga.gov. 3600 IN DNSKEY ( 256 3 5 AwEAAcN5y9fDRhxcFJf047QSYM1W1COPqCD4trFxGjLnwA0XbyCr8RsV30RtJeWtUXL7JY6COGUW FbXSWXsUB4rceOhyR4SRHXUfBvAjdnHejMuuGYi4qhWq2Jtxk2xrshFSIrLM5+J0K2ZAEMru2NWz ppf35txyWLNaBhCAPj8HwnW1 ) ; keytag 21537`
	`nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAeUqBZ61PIDxkxyahFFfvDXA8uiwpaBqUnnv8+igiut8+7dwVW4OvavhQ2sYJWyg+OhwG3hi M+0w8p9kF3JbW7XLyQTF+lTjwnoN9f6uz34rWf2bZV5sT7G/ZDO59Ka/1xEjQRY8ihwPsou4p2jB T1EEAkXCw2N+bAhxfHDbqxJVzonvUo80bLt1WUmc7CfN0pYi3llk2jYCSAfm0PEppxWP3XtBM7Q6 V63Th5U8OhvDTpKGpI4HfvbGvCp8+P29u0T2eLqwZF6VSdEtZCP+C0/DI1K9f8fL8Oe9rlJPO+zL gWgVXhRMUe7VbT+MqYoNBjU8GiWVxDomgMyuugOnBtk= ) ; keytag 65355`
	`nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaaY9IZGZRI1+OTBniuS+GUg8UNGwa9EYnrRpKldXQwDhyLjeT1Hs3AV3r6f+INA+sxbqZbd NCc8XcP3P/PP1RP1cGrS64a1veRERc9Bgf/T3ZxbrffukaVsBrh93BRJt7xle9nhUCXsXmy5X5W7 T3RWZjz+n/+f9yBtvdMwIhuRtIYhpSjG57mGFq199XGgp0P+LbIYXw6+8B/8OFhOIaxrKO5La61B 9hTwwKJ3Us8G7quqnLcjg7kwfWrfuFW//zORQQvJ63y60vnQ2iVeyyNmN/bXr9t0ynmnme6ptaWU GVdr8oEBoXV97ZFgl7/Qt1kzztjURiQg4kBfpvxT8VM= ) ; keytag 57335`
	DNSKEY=56044/SEP is now in the chain-of-trust
	DS=56044/SHA-1 verifies DNSKEY=56044/SEP
	DS=56044/SHA-256 verifies DNSKEY=56044/SEP
	DNSKEY=57335/SEP is now in the chain-of-trust
	DS=57335/SHA-256 verifies DNSKEY=57335/SEP
	Found 6 RRSIGs over DNSKEY RRset
	`nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20251017040357 20250917040357 21537 nga.gov. HuU3redtkfyxEnuE4yWlCjA1XcyxybguKVUwAb9ENvyXzLC7Ah2/0AYX0zrbIdrr5iU4d00RKjsl zHxEnQDXDyHh9CxGw6TVOpr2p5kEyI4G1ut+JLxb93NJlSFIyooksjQ2pqj7iY2pBhOAPIa4Ww1+ HsijlwSRj8fzwhgrHsA= )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20251017040357 20250917040357 56044 nga.gov. TxQoH0WrpdNd1k10f/4isXwxq3UkZeXEjjleYY8LvxPBbHHoIR3dubGIPm28DxKDnbOkGfYZQVi2 ykeEbjXBTksL6rSvHdfodtDPOMJUTiBhczyL/ksm8AyinjDmqbxriSpiVYm7K6yPnflPxFHPhS1/ v5+jTQyJiwm+Rc6mrxk= )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251017040357 20250917040357 10338 nga.gov. g6Jz3nW6GPv2iLkdyehn3cN5VKpOJPqNslOSLyJXg2OVwFq0N5VMv8+JFYnNUgNhP84R6e/ZCrNm Uq0EKg1V0Y28NAHDJ5jKlvGEL1TubYvaJloLDkrINzWmfqiEvoZRzHvR3OJLM0kMtnhcVunh8xXL x49BzIUaQw/e1pW9H4v1STbxzPHs54IymrOlw7hm5rQ3Z6KyunzNMcYFp+P2jCmuyae2RmUDpeHX orgCoOiHOWwNmsWT9JGiPwwPQroqjSjFece6rVtcIxbl0Vt2tNuLoJMkeI7TYA5ISYGkh3yFFtv9 ubBSjtKdn8A+TY8Lq1aE2Qa2lWL8nHdPw+GxsA== )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251017040357 20250917040357 42536 nga.gov. TAouhkZisitglUnIB5oRK4sZ2YVkvtacG3YnhpFYqx1dQKUrsY7/TISGt8mtkARJ1ZGclEM/ojMD h+tzFcwuc03SGrFg3Psgvb2bh8T4jjNK0KEUWq2di+ABnAA8DRJeRNwhiGyd6kyIG3O9AvNXJ4Ch 9KyDQRFOL2lMWzJZJ6eLYT+rQj5tgr3Iv42J52vYVUyg3BNA06GSF7McS+3UfXw21jlssaf+upzZ rmNsaSkl2IYekJHhLOr1a6BCclsfccs0K+MI3w+LM8fhEdj7DQYzIWGZeayI0uPQhXp35Qj0dKkI IrB7M9PnnjX+N24MxQmOOVQlu+IqfXgTo7G8gw== )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251017040357 20250917040357 57335 nga.gov. comfSVovpECzhaq+98MboXxP+XtSsibwPO9rSOCiKfzHqxsXu5rF5aj1Go2RBcaPIl4TYLOdOXFo cqRq85sUh3VW7oV9kUe/NJ5LtyJizQVx4+oHwsyk1OTpCvpv7mf+CSawPjyhQ6pHxzi0xOKrCI1+ UYbCuAzSpy6mXTqPrH39MoQQIuKsqegX65EyOZTDWzuNUOAGzzrmnZviysugkFq5GwBAU/UBJWgn XJ6UwbJCAoK81XgaG0CN49JtrnHdh3DKVaFuagjK1643bbA1sboovpStH12HH4zuIJ1FsongsD4n LdmrCoVoR0ItL0R7wg0Dj4DkKEImvUjKvYNVuw== )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251017040357 20250917040357 65355 nga.gov. zH+89drowpxcP7MKh7TAXV/pCvtDLG0oquno63Fx34mwKrCACBJEnCVQEO81VRtyfLBsbbaId7YP oGTL+wAnga8OoNIs7y4+PWP9/TaZcC672Ci1LotQISe7oFgjoamtKRTaLQCXkGitFXMGJ1wIl4zW KuJ0c0ZnM7jIgIWOTb61cTAzCP/1Rorewgn3LqsEGFpBu/ObRkEm5p4zUt5s+qCruKaWHnp9AAOm N8fxBYU9lKBQXZJkUs/l2AXQlgckJHiBCaehyxamgj5qfzNrrcYT6kQbkd88zZMvdu/MShR98hr4 GAP4Y1N5gSk9NxwfXPIbIOrNnYmC2hOlT61baQ== )`
	RRSIG=21537 and DNSKEY=21537 verifies the DNSKEY RRset
	RRSIG=56044 and DNSKEY=56044/SEP verifies the DNSKEY RRset
	RRSIG=10338 and DNSKEY=10338 verifies the DNSKEY RRset
	RRSIG=42536 and DNSKEY=42536/SEP verifies the DNSKEY RRset
	RRSIG=57335 and DNSKEY=57335/SEP verifies the DNSKEY RRset
	RRSIG=65355 and DNSKEY=65355 verifies the DNSKEY RRset
	DNSKEY=42536/SEP is now in the chain-of-trust
	DNSKEY=10338 is now in the chain-of-trust
	DNSKEY=21537 is now in the chain-of-trust
	DNSKEY=65355 is now in the chain-of-trust
	Query to auth4.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 208.59.89.9
	;; Response received from [208.59.89.9] 1664 octets ;; HEADER SECTION ;; id = 43184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20251017040357 20250917040357 21537 nga.gov. LJTa+MRnCR93uzXubLywFIdQCNq6HJsfO8Xa1vBLmnw1Fcu+hoFnUEqb1+KAGjy8rBSDjCgPKhQw +yZxfGredkVIdbOaagseMnJq0v7NiVU43I1UTLNCjUkIrpdOJMOX+kTsZIdv9mwm2XPAcqDnGizx 8b6Jn6NYvm3lsv33w0M= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 10338 nga.gov. FeBX4j22YawS8hyVxgStQy0nAGAOiMTiK2cTSE7ZtnYAOX0crZIoKzeYRCSnqyPJCiilDawaQaCr zgw8pZjskOZFV81ptRNz6jmaLYpWYjexrS2Rigd+R4D8I3Ian0jiIXvng2E71EVM+SwDTBmVd3w6 Ixer/2aDPh1BNl6b1YpgCHpvi2VyXr6IBj6zQcLuwkTylTpUqXoc+0BffKrEo0HSKzmAzGVQXXFz CfFCcZSnfnyXbAJVLZPkbWAv6Ve+VoN94DDitIKvo1+qPoroDBG0XuhyavUwEw4gmsirje7tItPP jNgRmc3UpzpqCa0Re1Bdu6c7g8Jc2NKBQJhDsw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 65355 nga.gov. GjqT0LBgX8PR8WhrMLSj5GV4eI56vnB6ifA6JqU6XRxe0LgZn7h3zquWxINRv6bQxjAhJGeTLxx+ HFzEqpixoPCIgh2KlLNHha2cyq6dQ+9iT1MYsKCnjQZg0DyxpV8bMBglg3DwjMaGKJrEk+XooqTJ XVur+kCA3Jnt79DFWWs5JuB1Q5u02sz36blJUr5BOKxc0YBenEHPvVbjVQlv5BFFGobOIUmk8Xj7 c/+B7JGS1YJudcBNNJ5J5oC3OiJi6D11OIhyslAWZ3yCZ2tjmFfdQxkAyUnBnZHv//17C7Pzsgku xGwkqqIgdH+p5LuC/TD4UchY+eLkbosRHPLT4w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth4.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth2.dns.rcn.net for NGA.GOV/SOA
	Received 1709 bytes from 207.172.11.14
	;; Response received from [207.172.11.14] 1709 octets ;; HEADER SECTION ;; id = 19335 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (4 records) nga.gov. 3600 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2025091701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 3600 IN RRSIG ( SOA 5 2 3600 20251017040357 20250917040357 21537 nga.gov. rOZXtBVpcdnc9PQpZ10ehqH46Tw8jC0gjBqnjuTBKHwIWB+fObUA36TH0r69iREIvzNpZ7eLZK9U Fy2E6U/xmVd4Buo2bX7KLK3b7Vmxw6shD+kzthHMRd+J3i2d5j+yNDBrBYyFc8OkNk6VeVj/qj+8 Jsa0BKPlcuyJdkkZpKM= ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20251017040357 20250917040357 10338 nga.gov. d9TTcnNV5PwquEVvmwXeI3/kC9qUMX2XauwnfZz0D/vBHaM7FRVodS2iPNGgMaU7Fq4mekPHD5wb BTU9jLhDPHfh3roDw7m1N3CLB2xLvos2E23s+hZgD8Ngbua0KA+k6VcD2eufDAM8GSl48fXmcIjV KO9MValgZp+GsOPhbV3PdD7ni/OAL3awhJJPhlVrxUnOOexzFBoof5nG8YfqGvTlIzmQsyL13PUg I1WerA/9O63VxS1oLlSf/AsmQsdTJ2IheQPpK4/sxplNs/aEvJz83qs2R6bwz53aQAizh5Tq7PFY 1um8xy4G8Yr382lEF5jABqGLwpajlYEAG/HBSA== ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20251017040357 20250917040357 65355 nga.gov. tFpxgi+YSe8ATgHk/8ADpVAkh05o44YKQ/jr29scGBfLwf1JbR5oGfWWxltOTKY2Rzp5iw9bd4fv 70bKB6IDZCL2izAurCKlYF3WIm1vmmL3ZkCPik49Otqfk5+qY+rMZznL4AwKIqON2tELX8YLX64d d5idfqebQ69583ACoX+BI/slns8bI/wemyWUN0nntgj7eUw17LinG26Q0hF6cDLysA9GtcoGmZHU NQvEe9AIj6fuk9mDDehHyPdbO0Wnw0JUSwT3ig2RvEiyeipenZY2qy9JeVexAtgG8ysLeMGIZrb0 Y+LC0g4Sju4Ku4MwR3BuUnRRHmitF6Tq3akgPQ== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20251017040357 20250917040357 21537 nga.gov. LJTa+MRnCR93uzXubLywFIdQCNq6HJsfO8Xa1vBLmnw1Fcu+hoFnUEqb1+KAGjy8rBSDjCgPKhQw +yZxfGredkVIdbOaagseMnJq0v7NiVU43I1UTLNCjUkIrpdOJMOX+kTsZIdv9mwm2XPAcqDnGizx 8b6Jn6NYvm3lsv33w0M= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 10338 nga.gov. FeBX4j22YawS8hyVxgStQy0nAGAOiMTiK2cTSE7ZtnYAOX0crZIoKzeYRCSnqyPJCiilDawaQaCr zgw8pZjskOZFV81ptRNz6jmaLYpWYjexrS2Rigd+R4D8I3Ian0jiIXvng2E71EVM+SwDTBmVd3w6 Ixer/2aDPh1BNl6b1YpgCHpvi2VyXr6IBj6zQcLuwkTylTpUqXoc+0BffKrEo0HSKzmAzGVQXXFz CfFCcZSnfnyXbAJVLZPkbWAv6Ve+VoN94DDitIKvo1+qPoroDBG0XuhyavUwEw4gmsirje7tItPP jNgRmc3UpzpqCa0Re1Bdu6c7g8Jc2NKBQJhDsw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 65355 nga.gov. GjqT0LBgX8PR8WhrMLSj5GV4eI56vnB6ifA6JqU6XRxe0LgZn7h3zquWxINRv6bQxjAhJGeTLxx+ HFzEqpixoPCIgh2KlLNHha2cyq6dQ+9iT1MYsKCnjQZg0DyxpV8bMBglg3DwjMaGKJrEk+XooqTJ XVur+kCA3Jnt79DFWWs5JuB1Q5u02sz36blJUr5BOKxc0YBenEHPvVbjVQlv5BFFGobOIUmk8Xj7 c/+B7JGS1YJudcBNNJ5J5oC3OiJi6D11OIhyslAWZ3yCZ2tjmFfdQxkAyUnBnZHv//17C7Pzsgku xGwkqqIgdH+p5LuC/TD4UchY+eLkbosRHPLT4w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth1.dns.rcn.net for NGA.GOV/SOA
	Received 1709 bytes from 207.172.3.20
	;; Response received from [207.172.3.20] 1709 octets ;; HEADER SECTION ;; id = 32628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (4 records) nga.gov. 3600 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2025091701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 3600 IN RRSIG ( SOA 5 2 3600 20251017040357 20250917040357 21537 nga.gov. rOZXtBVpcdnc9PQpZ10ehqH46Tw8jC0gjBqnjuTBKHwIWB+fObUA36TH0r69iREIvzNpZ7eLZK9U Fy2E6U/xmVd4Buo2bX7KLK3b7Vmxw6shD+kzthHMRd+J3i2d5j+yNDBrBYyFc8OkNk6VeVj/qj+8 Jsa0BKPlcuyJdkkZpKM= ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20251017040357 20250917040357 10338 nga.gov. d9TTcnNV5PwquEVvmwXeI3/kC9qUMX2XauwnfZz0D/vBHaM7FRVodS2iPNGgMaU7Fq4mekPHD5wb BTU9jLhDPHfh3roDw7m1N3CLB2xLvos2E23s+hZgD8Ngbua0KA+k6VcD2eufDAM8GSl48fXmcIjV KO9MValgZp+GsOPhbV3PdD7ni/OAL3awhJJPhlVrxUnOOexzFBoof5nG8YfqGvTlIzmQsyL13PUg I1WerA/9O63VxS1oLlSf/AsmQsdTJ2IheQPpK4/sxplNs/aEvJz83qs2R6bwz53aQAizh5Tq7PFY 1um8xy4G8Yr382lEF5jABqGLwpajlYEAG/HBSA== ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20251017040357 20250917040357 65355 nga.gov. tFpxgi+YSe8ATgHk/8ADpVAkh05o44YKQ/jr29scGBfLwf1JbR5oGfWWxltOTKY2Rzp5iw9bd4fv 70bKB6IDZCL2izAurCKlYF3WIm1vmmL3ZkCPik49Otqfk5+qY+rMZznL4AwKIqON2tELX8YLX64d d5idfqebQ69583ACoX+BI/slns8bI/wemyWUN0nntgj7eUw17LinG26Q0hF6cDLysA9GtcoGmZHU NQvEe9AIj6fuk9mDDehHyPdbO0Wnw0JUSwT3ig2RvEiyeipenZY2qy9JeVexAtgG8ysLeMGIZrb0 Y+LC0g4Sju4Ku4MwR3BuUnRRHmitF6Tq3akgPQ== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20251017040357 20250917040357 21537 nga.gov. LJTa+MRnCR93uzXubLywFIdQCNq6HJsfO8Xa1vBLmnw1Fcu+hoFnUEqb1+KAGjy8rBSDjCgPKhQw +yZxfGredkVIdbOaagseMnJq0v7NiVU43I1UTLNCjUkIrpdOJMOX+kTsZIdv9mwm2XPAcqDnGizx 8b6Jn6NYvm3lsv33w0M= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 10338 nga.gov. FeBX4j22YawS8hyVxgStQy0nAGAOiMTiK2cTSE7ZtnYAOX0crZIoKzeYRCSnqyPJCiilDawaQaCr zgw8pZjskOZFV81ptRNz6jmaLYpWYjexrS2Rigd+R4D8I3Ian0jiIXvng2E71EVM+SwDTBmVd3w6 Ixer/2aDPh1BNl6b1YpgCHpvi2VyXr6IBj6zQcLuwkTylTpUqXoc+0BffKrEo0HSKzmAzGVQXXFz CfFCcZSnfnyXbAJVLZPkbWAv6Ve+VoN94DDitIKvo1+qPoroDBG0XuhyavUwEw4gmsirje7tItPP jNgRmc3UpzpqCa0Re1Bdu6c7g8Jc2NKBQJhDsw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 65355 nga.gov. GjqT0LBgX8PR8WhrMLSj5GV4eI56vnB6ifA6JqU6XRxe0LgZn7h3zquWxINRv6bQxjAhJGeTLxx+ HFzEqpixoPCIgh2KlLNHha2cyq6dQ+9iT1MYsKCnjQZg0DyxpV8bMBglg3DwjMaGKJrEk+XooqTJ XVur+kCA3Jnt79DFWWs5JuB1Q5u02sz36blJUr5BOKxc0YBenEHPvVbjVQlv5BFFGobOIUmk8Xj7 c/+B7JGS1YJudcBNNJ5J5oC3OiJi6D11OIhyslAWZ3yCZ2tjmFfdQxkAyUnBnZHv//17C7Pzsgku xGwkqqIgdH+p5LuC/TD4UchY+eLkbosRHPLT4w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth3.dns.rcn.net for NGA.GOV/SOA
	Received 1709 bytes from 207.96.3.153
	;; Response received from [207.96.3.153] 1709 octets ;; HEADER SECTION ;; id = 49094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (4 records) nga.gov. 3600 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2025091601 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 3600 IN RRSIG ( SOA 5 2 3600 20251016040355 20250916040355 21537 nga.gov. dA5OHRg5bDPNhm+sDjh5k9EoOD16CWsU11PThoVe9LpRHTurqKrnnUm/1ZvKbiqMcee905f/1ygQ zSWZ1LYRrW8TZJOJ9H2qo+LBCVJCOlTQcVIRw9BO2rhwRYY5mwqpJlNpAl6U188Bi2ez4MkE/QwD tcTrVEOXDW7Z5plbCyM= ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20251016040355 20250916040355 10338 nga.gov. VfH3zibmXFY20MaqR7A4uiGe5s9w4hzP9le7revtlBcf5mrhxqggoez9zeD1W7vW1m2+V4ey/LTE S11wjM6dF+CqKLc5VRWOcYJD9RlyhpYsUbchqc99Cj6UxRuWNExkeMKWip6YqjJl07AAp9W+TJtN Y0OeqcijbJonxkl5/PvMDPnuW9JLp5y2SP/GMytukgmzyuxubtOfPOxsSpYmjxSI0clzLcWJL2Ao T1dGjQwl0Mna/B9NMucBO9gGco96T/W69P4ClER6J+i+MF8crQWUI4tMc4XAnF4Lx9r+X6jprmH4 wzSuxvOHy+GY8L3LewJ477+2RAyyShbbgPTxjQ== ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20251016040355 20250916040355 65355 nga.gov. rreb/ZymlnaI6Wd/0fTCKnxRTlGrj0TKa3DOXRZ16JGM94TNXuFZcpuzDLncnvIsP7RFavhVdEe3 tn7DStz3wCxDt66Tt8vMyQzqJYdGPuJUAWi+iwHE6hYehMkmB/QDTWlOT5JEmT3w4+K38nw+mmRm 6kFhW78Jy8B6VCP6e6rPcZqxg9SecKILo9bMVmlICKLGZVRAI9yxkxEieR2JxBhrCpSLXf19zT0j lKIy4S5fAy3i6RvsvGNnuR947PiueEwaypKPJ5H5NYGUwnyvCrspw7HmPSYzDrZyp8ThBeK4zG6c zn2O+LMBcMQu6kcgsr5HGiVkGSy+bzEQqJ219A== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20251016040355 20250916040355 21537 nga.gov. WmWKXC1Hf/PptpYVtfl/xByyg61pwnpoyzGE9lfWA7GD7y4x+V5BnelXenQ/PtHSdvg0DbInQMqG Fefc5b4JSwJXxoAfR3ztUdpgETRJHBej7SFyc7XGfqLVONN0ExF/t/xCH/8O43AVPvC0uKOtDRPr QjRdC82VzuzWh936UPk= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251016040355 20250916040355 10338 nga.gov. DU8wg7dUi9FIRSUKiZIECXTM7CosR+4cRhemsm2dAJRb83Dcebxrmjx1UM+xL2oMe06Df5/ppWVa bn6tcs8hg8Ln6HpMVu0s/ZrppDoVxpqmeoC/9IyYNhYjGRx5qy9s/UA6CaPAb8m2e0xbojo92LYz O93OG8FBSDV0J24L4IFteGJXPHTuwYUuvrsmzdTLr3Qw1Zi2KaUTfrwdBvWo1ezvdpZTuUKgURGt nW8xQMvm0PTTOuvSYWj7SvgJEyfZHbvLFPZEtuzoxEfI8OcFL56iu7fXooSHZEDn4KoIN5FslNtf gC33d/KS7IbV/yHlsncHQ72foYCgDd5A9I9EVw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251016040355 20250916040355 65355 nga.gov. c2kpRwB1GCb0b3UeujsvA0Qu+CPoL+ZgSDEtnTQTL9Cs8gu/MrctNGRThnrcobQOp5Qxr6jNACbk iYg+HZbX+k9G04NpnpRS38SFew/Uk5ihWBMuwMiRtbhqU+lSVmpPyaSzsbg7AqRT9JBX/A3KAtCn IKihTbjHmLrfQJC82+c4j2O+STRQQt/MjrRi9tTjqiRucFG5sRzfGiIKIlKMkHLL5G7wqZ1a4sED 9tPK3i3/rTN5MQSZyERA/XrsxLTgBzvCZczHhMcz36ti7K2HUsdV4dYpMImGdDWz7jJJ3MIDGJGY 9of2zyPxjxdmA/FzPU29EzBJQ9RScBMI8PlA9Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth3.dns.rcn.net serial (2025091601) differs from auth2.dns.rcn.net serial (2025091701)
	Query to auth4.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.172.3.22
	;; Response received from [207.172.3.22] 1664 octets ;; HEADER SECTION ;; id = 50094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20251017040357 20250917040357 21537 nga.gov. LJTa+MRnCR93uzXubLywFIdQCNq6HJsfO8Xa1vBLmnw1Fcu+hoFnUEqb1+KAGjy8rBSDjCgPKhQw +yZxfGredkVIdbOaagseMnJq0v7NiVU43I1UTLNCjUkIrpdOJMOX+kTsZIdv9mwm2XPAcqDnGizx 8b6Jn6NYvm3lsv33w0M= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 10338 nga.gov. FeBX4j22YawS8hyVxgStQy0nAGAOiMTiK2cTSE7ZtnYAOX0crZIoKzeYRCSnqyPJCiilDawaQaCr zgw8pZjskOZFV81ptRNz6jmaLYpWYjexrS2Rigd+R4D8I3Ian0jiIXvng2E71EVM+SwDTBmVd3w6 Ixer/2aDPh1BNl6b1YpgCHpvi2VyXr6IBj6zQcLuwkTylTpUqXoc+0BffKrEo0HSKzmAzGVQXXFz CfFCcZSnfnyXbAJVLZPkbWAv6Ve+VoN94DDitIKvo1+qPoroDBG0XuhyavUwEw4gmsirje7tItPP jNgRmc3UpzpqCa0Re1Bdu6c7g8Jc2NKBQJhDsw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 65355 nga.gov. GjqT0LBgX8PR8WhrMLSj5GV4eI56vnB6ifA6JqU6XRxe0LgZn7h3zquWxINRv6bQxjAhJGeTLxx+ HFzEqpixoPCIgh2KlLNHha2cyq6dQ+9iT1MYsKCnjQZg0DyxpV8bMBglg3DwjMaGKJrEk+XooqTJ XVur+kCA3Jnt79DFWWs5JuB1Q5u02sz36blJUr5BOKxc0YBenEHPvVbjVQlv5BFFGobOIUmk8Xj7 c/+B7JGS1YJudcBNNJ5J5oC3OiJi6D11OIhyslAWZ3yCZ2tjmFfdQxkAyUnBnZHv//17C7Pzsgku xGwkqqIgdH+p5LuC/TD4UchY+eLkbosRHPLT4w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== )`
	RRSIG=21537 and DNSKEY=21537 verifies the A RRset
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth3.dns.rcn.net for NGA.GOV/A
	Received 809 bytes from 207.172.3.21
	;; Response received from [207.172.3.21] 809 octets ;; HEADER SECTION ;; id = 34690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) NGA.GOV. 3600 IN A 199.16.64.40 NGA.GOV. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= ) NGA.GOV. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== ) NGA.GOV. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth3.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth3.dns.rcn.net for NGA.GOV/A
	Received 809 bytes from 207.172.3.21
	;; Response received from [207.172.3.21] 809 octets ;; HEADER SECTION ;; id = 45605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) NGA.GOV. 3600 IN A 199.16.64.40 NGA.GOV. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= ) NGA.GOV. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== ) NGA.GOV. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`NGA.GOV. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= )`
	`NGA.GOV. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== )`
	`NGA.GOV. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== )`
	RRSIG=21537 and DNSKEY=21537 verifies the A RRset
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth1.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 66.44.1.44
	;; Response received from [66.44.1.44] 1664 octets ;; HEADER SECTION ;; id = 60722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20251017040357 20250917040357 21537 nga.gov. LJTa+MRnCR93uzXubLywFIdQCNq6HJsfO8Xa1vBLmnw1Fcu+hoFnUEqb1+KAGjy8rBSDjCgPKhQw +yZxfGredkVIdbOaagseMnJq0v7NiVU43I1UTLNCjUkIrpdOJMOX+kTsZIdv9mwm2XPAcqDnGizx 8b6Jn6NYvm3lsv33w0M= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 10338 nga.gov. FeBX4j22YawS8hyVxgStQy0nAGAOiMTiK2cTSE7ZtnYAOX0crZIoKzeYRCSnqyPJCiilDawaQaCr zgw8pZjskOZFV81ptRNz6jmaLYpWYjexrS2Rigd+R4D8I3Ian0jiIXvng2E71EVM+SwDTBmVd3w6 Ixer/2aDPh1BNl6b1YpgCHpvi2VyXr6IBj6zQcLuwkTylTpUqXoc+0BffKrEo0HSKzmAzGVQXXFz CfFCcZSnfnyXbAJVLZPkbWAv6Ve+VoN94DDitIKvo1+qPoroDBG0XuhyavUwEw4gmsirje7tItPP jNgRmc3UpzpqCa0Re1Bdu6c7g8Jc2NKBQJhDsw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 65355 nga.gov. GjqT0LBgX8PR8WhrMLSj5GV4eI56vnB6ifA6JqU6XRxe0LgZn7h3zquWxINRv6bQxjAhJGeTLxx+ HFzEqpixoPCIgh2KlLNHha2cyq6dQ+9iT1MYsKCnjQZg0DyxpV8bMBglg3DwjMaGKJrEk+XooqTJ XVur+kCA3Jnt79DFWWs5JuB1Q5u02sz36blJUr5BOKxc0YBenEHPvVbjVQlv5BFFGobOIUmk8Xj7 c/+B7JGS1YJudcBNNJ5J5oC3OiJi6D11OIhyslAWZ3yCZ2tjmFfdQxkAyUnBnZHv//17C7Pzsgku xGwkqqIgdH+p5LuC/TD4UchY+eLkbosRHPLT4w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth1.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth1.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.172.3.20
	;; Response received from [207.172.3.20] 1664 octets ;; HEADER SECTION ;; id = 21779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20251017040357 20250917040357 21537 nga.gov. LJTa+MRnCR93uzXubLywFIdQCNq6HJsfO8Xa1vBLmnw1Fcu+hoFnUEqb1+KAGjy8rBSDjCgPKhQw +yZxfGredkVIdbOaagseMnJq0v7NiVU43I1UTLNCjUkIrpdOJMOX+kTsZIdv9mwm2XPAcqDnGizx 8b6Jn6NYvm3lsv33w0M= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 10338 nga.gov. FeBX4j22YawS8hyVxgStQy0nAGAOiMTiK2cTSE7ZtnYAOX0crZIoKzeYRCSnqyPJCiilDawaQaCr zgw8pZjskOZFV81ptRNz6jmaLYpWYjexrS2Rigd+R4D8I3Ian0jiIXvng2E71EVM+SwDTBmVd3w6 Ixer/2aDPh1BNl6b1YpgCHpvi2VyXr6IBj6zQcLuwkTylTpUqXoc+0BffKrEo0HSKzmAzGVQXXFz CfFCcZSnfnyXbAJVLZPkbWAv6Ve+VoN94DDitIKvo1+qPoroDBG0XuhyavUwEw4gmsirje7tItPP jNgRmc3UpzpqCa0Re1Bdu6c7g8Jc2NKBQJhDsw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 65355 nga.gov. GjqT0LBgX8PR8WhrMLSj5GV4eI56vnB6ifA6JqU6XRxe0LgZn7h3zquWxINRv6bQxjAhJGeTLxx+ HFzEqpixoPCIgh2KlLNHha2cyq6dQ+9iT1MYsKCnjQZg0DyxpV8bMBglg3DwjMaGKJrEk+XooqTJ XVur+kCA3Jnt79DFWWs5JuB1Q5u02sz36blJUr5BOKxc0YBenEHPvVbjVQlv5BFFGobOIUmk8Xj7 c/+B7JGS1YJudcBNNJ5J5oC3OiJi6D11OIhyslAWZ3yCZ2tjmFfdQxkAyUnBnZHv//17C7Pzsgku xGwkqqIgdH+p5LuC/TD4UchY+eLkbosRHPLT4w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== )`
	RRSIG=21537 and DNSKEY=21537 verifies the A RRset
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth2.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.172.11.14
	;; Response received from [207.172.11.14] 1664 octets ;; HEADER SECTION ;; id = 28311 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20251017040357 20250917040357 21537 nga.gov. LJTa+MRnCR93uzXubLywFIdQCNq6HJsfO8Xa1vBLmnw1Fcu+hoFnUEqb1+KAGjy8rBSDjCgPKhQw +yZxfGredkVIdbOaagseMnJq0v7NiVU43I1UTLNCjUkIrpdOJMOX+kTsZIdv9mwm2XPAcqDnGizx 8b6Jn6NYvm3lsv33w0M= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 10338 nga.gov. FeBX4j22YawS8hyVxgStQy0nAGAOiMTiK2cTSE7ZtnYAOX0crZIoKzeYRCSnqyPJCiilDawaQaCr zgw8pZjskOZFV81ptRNz6jmaLYpWYjexrS2Rigd+R4D8I3Ian0jiIXvng2E71EVM+SwDTBmVd3w6 Ixer/2aDPh1BNl6b1YpgCHpvi2VyXr6IBj6zQcLuwkTylTpUqXoc+0BffKrEo0HSKzmAzGVQXXFz CfFCcZSnfnyXbAJVLZPkbWAv6Ve+VoN94DDitIKvo1+qPoroDBG0XuhyavUwEw4gmsirje7tItPP jNgRmc3UpzpqCa0Re1Bdu6c7g8Jc2NKBQJhDsw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 65355 nga.gov. GjqT0LBgX8PR8WhrMLSj5GV4eI56vnB6ifA6JqU6XRxe0LgZn7h3zquWxINRv6bQxjAhJGeTLxx+ HFzEqpixoPCIgh2KlLNHha2cyq6dQ+9iT1MYsKCnjQZg0DyxpV8bMBglg3DwjMaGKJrEk+XooqTJ XVur+kCA3Jnt79DFWWs5JuB1Q5u02sz36blJUr5BOKxc0YBenEHPvVbjVQlv5BFFGobOIUmk8Xj7 c/+B7JGS1YJudcBNNJ5J5oC3OiJi6D11OIhyslAWZ3yCZ2tjmFfdQxkAyUnBnZHv//17C7Pzsgku xGwkqqIgdH+p5LuC/TD4UchY+eLkbosRHPLT4w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth2.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth2.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.172.11.14
	;; Response received from [207.172.11.14] 1664 octets ;; HEADER SECTION ;; id = 31892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20251017040357 20250917040357 21537 nga.gov. LJTa+MRnCR93uzXubLywFIdQCNq6HJsfO8Xa1vBLmnw1Fcu+hoFnUEqb1+KAGjy8rBSDjCgPKhQw +yZxfGredkVIdbOaagseMnJq0v7NiVU43I1UTLNCjUkIrpdOJMOX+kTsZIdv9mwm2XPAcqDnGizx 8b6Jn6NYvm3lsv33w0M= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 10338 nga.gov. FeBX4j22YawS8hyVxgStQy0nAGAOiMTiK2cTSE7ZtnYAOX0crZIoKzeYRCSnqyPJCiilDawaQaCr zgw8pZjskOZFV81ptRNz6jmaLYpWYjexrS2Rigd+R4D8I3Ian0jiIXvng2E71EVM+SwDTBmVd3w6 Ixer/2aDPh1BNl6b1YpgCHpvi2VyXr6IBj6zQcLuwkTylTpUqXoc+0BffKrEo0HSKzmAzGVQXXFz CfFCcZSnfnyXbAJVLZPkbWAv6Ve+VoN94DDitIKvo1+qPoroDBG0XuhyavUwEw4gmsirje7tItPP jNgRmc3UpzpqCa0Re1Bdu6c7g8Jc2NKBQJhDsw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20251017040357 20250917040357 65355 nga.gov. GjqT0LBgX8PR8WhrMLSj5GV4eI56vnB6ifA6JqU6XRxe0LgZn7h3zquWxINRv6bQxjAhJGeTLxx+ HFzEqpixoPCIgh2KlLNHha2cyq6dQ+9iT1MYsKCnjQZg0DyxpV8bMBglg3DwjMaGKJrEk+XooqTJ XVur+kCA3Jnt79DFWWs5JuB1Q5u02sz36blJUr5BOKxc0YBenEHPvVbjVQlv5BFFGobOIUmk8Xj7 c/+B7JGS1YJudcBNNJ5J5oC3OiJi6D11OIhyslAWZ3yCZ2tjmFfdQxkAyUnBnZHv//17C7Pzsgku xGwkqqIgdH+p5LuC/TD4UchY+eLkbosRHPLT4w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20251017040357 20250917040357 21537 nga.gov. m1h13MG1JlbTgQRg9Ho3ON+iBVaV7yp7y2C+UDnVuHagtrT360a+84nilFx78R687YK41BxZYOwG hHGH7dP0eE86VA1fPp3g5z28lHE3NXF90PFKkfx+DFaK+gdez4mVARSA0Y5D2xgUkAsLpkVkx+do Rx3qN9hGwm5B/YsVH+Y= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 10338 nga.gov. R36PWbvyorBty/x31wze2/p7ZM21h3pk/7zanJXinNLEVvzkGosv7+emte6iVc04OyVYu1Gm5Pok +gS2m5LHsBh2FbsJ2nkDwPD9ZPHdlBo92hnnQsMvdWRR/rbTncSJjG74BjNelktQcuahoAVvtHyo 74RIFWwV8ozHXHSjg/tCYyMxx+HKJJODO+l62K91Kmh8ZJCZbhNwD7MrspabocMlrDic/wYJuCsH IDHMO1R3tzXouZ1JzZx58B2WjDKleu+qor7OuxtYsu2XJkUCTtwqIbT4+FQz/6T8wxfsHqF70xGt yUD50yzl2b1rnZvxxHB+pg1INxg2kXqHoQdSvg== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20251017040357 20250917040357 65355 nga.gov. kKWU+ebbUmCSQiY/whpNgUqaquHPnSDnlyTHrYf2K1v+4b1ZGfa013RIzjlKDzsxUhR99y2XGizX Y+W21kv+cqHUtpnGUkQCy4jzy6U0XfuEQU1qvxscwRiY2DKWraipVpnqf2DR/urYY7l8kVOCrFtR 9Fnh9oXie+1usEdQLDA8TdAAxn51BPV4qr9MYiTnmx7O2E7mo/AALVEPku4UhthsDMGgnnLFxX1K 2CKbzD29XdzQdbguj1BeC2T3JiLe+AF7LBP6BGSEgS3BOEPgwCg+lZ9B209uuoS+cCEMoHjTgztc SaBHuoXviHhATcBBcjlFLHtf3Vzd+xEJpNVgSw== )`
	RRSIG=21537 and DNSKEY=21537 verifies the A RRset
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NGA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: