DNSSEC Debugger

Domain Name:

Time: 2026-03-21 06:44:28 UTC

Analyzing DNSSEC problems for NGA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 23415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for NGA.GOV/A
	Received 614 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 614 octets ;; HEADER SECTION ;; id = 16476 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260403050000 20260321040000 21831 . gw584KlqiQRmyngZ4A8eTkTyi44ceGCUV3JQBVjhAVy7N4uFtrvCnxideLNpZjqUmYIuU9oDeLv5 M7LdbwlW0V19nSoSn3Jw7Pd2DCpM3cOzO4SRktU+3oOjWSQvC0Fo1sEyAbhWK93imIMagHMCIakR 2I393ZK12LpnucNYiLxhJdZwOdhLg7t+zdLfSim5UfgHFmMML7IC/EQwLJdsCDS49CF3rvJUIUp2 8wdEo9FuS9bS5IND1s2wPs2Ps5jfBsLxolsxaFnVsONgfyfdmPYSpiBqQDErKm3cP7qQ0T1MnueT 81H6v4qiqHhwEbcohqqiT6vcnTmm/GYu3CqBvg== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 36770 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260403050000 20260321040000 21831 . gw584KlqiQRmyngZ4A8eTkTyi44ceGCUV3JQBVjhAVy7N4uFtrvCnxideLNpZjqUmYIuU9oDeLv5 M7LdbwlW0V19nSoSn3Jw7Pd2DCpM3cOzO4SRktU+3oOjWSQvC0Fo1sEyAbhWK93imIMagHMCIakR 2I393ZK12LpnucNYiLxhJdZwOdhLg7t+zdLfSim5UfgHFmMML7IC/EQwLJdsCDS49CF3rvJUIUp2 8wdEo9FuS9bS5IND1s2wPs2Ps5jfBsLxolsxaFnVsONgfyfdmPYSpiBqQDErKm3cP7qQ0T1MnueT 81H6v4qiqHhwEbcohqqiT6vcnTmm/GYu3CqBvg== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 61574 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260403050000 20260321040000 21831 . gw584KlqiQRmyngZ4A8eTkTyi44ceGCUV3JQBVjhAVy7N4uFtrvCnxideLNpZjqUmYIuU9oDeLv5 M7LdbwlW0V19nSoSn3Jw7Pd2DCpM3cOzO4SRktU+3oOjWSQvC0Fo1sEyAbhWK93imIMagHMCIakR 2I393ZK12LpnucNYiLxhJdZwOdhLg7t+zdLfSim5UfgHFmMML7IC/EQwLJdsCDS49CF3rvJUIUp2 8wdEo9FuS9bS5IND1s2wPs2Ps5jfBsLxolsxaFnVsONgfyfdmPYSpiBqQDErKm3cP7qQ0T1MnueT 81H6v4qiqHhwEbcohqqiT6vcnTmm/GYu3CqBvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260403050000 20260321040000 21831 . gw584KlqiQRmyngZ4A8eTkTyi44ceGCUV3JQBVjhAVy7N4uFtrvCnxideLNpZjqUmYIuU9oDeLv5 M7LdbwlW0V19nSoSn3Jw7Pd2DCpM3cOzO4SRktU+3oOjWSQvC0Fo1sEyAbhWK93imIMagHMCIakR 2I393ZK12LpnucNYiLxhJdZwOdhLg7t+zdLfSim5UfgHFmMML7IC/EQwLJdsCDS49CF3rvJUIUp2 8wdEo9FuS9bS5IND1s2wPs2Ps5jfBsLxolsxaFnVsONgfyfdmPYSpiBqQDErKm3cP7qQ0T1MnueT 81H6v4qiqHhwEbcohqqiT6vcnTmm/GYu3CqBvg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 26121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.GOV for NGA.GOV/A
	Received 358 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 358 octets ;; HEADER SECTION ;; id = 6875 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NGA.GOV. 10800 IN NS auth1.dns.rcn.net. NGA.GOV. 10800 IN NS auth2.dns.rcn.net. NGA.GOV. 10800 IN NS auth3.dns.rcn.net. NGA.GOV. 10800 IN NS auth4.dns.rcn.net. NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 ) NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260322074428 20260320054428 35496 gov. 4YjDbFGsraZKLky3JW74bwVOR/0ZvSwTNXbDyedS/x53b9iBxw03Buim36/vkqXGtmB/SAqXgZFI XtMHtea05A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.GOV for NGA.GOV/DNSKEY
	Received 358 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 358 octets ;; HEADER SECTION ;; id = 25707 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NGA.GOV. 10800 IN NS auth1.dns.rcn.net. NGA.GOV. 10800 IN NS auth2.dns.rcn.net. NGA.GOV. 10800 IN NS auth3.dns.rcn.net. NGA.GOV. 10800 IN NS auth4.dns.rcn.net. NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 ) NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260322074428 20260320054428 35496 gov. mRYMBNxR+Iyou6plgw0eyi5EnkHKlCh6ZyaMb8bimBEt/WBzb8cO9G2FWCpO3g9zLX5x8OAI+KRh AwjMRdSDuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone NGA.GOV

NGA.GOV

	Checking DS between GOV and NGA.GOV
	Query to d.ns.GOV for NGA.GOV/DS
	Received 267 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 267 octets ;; HEADER SECTION ;; id = 7488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DS ;; ANSWER SECTION (4 records) NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b ) NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 ) NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260322074428 20260320054428 35496 gov. DDNSGDkjvt16SPaXoMJB2B2qXa4gpCo7lcX97xuqisySX2PtHjUH6Euax4JUxdvfq7/6phgdVMyi BZ8qY3tNzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for NGA.GOV in the GOV zone
	DS=56044/SHA-1 uses a deprecated digest algorithm
	DS=56044/SHA-1 has algorithm RSASHA1
	DS=56044/SHA-256 has algorithm RSASHA1
	DS=57335/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NGA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260322074428 20260320054428 35496 gov. DDNSGDkjvt16SPaXoMJB2B2qXa4gpCo7lcX97xuqisySX2PtHjUH6Euax4JUxdvfq7/6phgdVMyi BZ8qY3tNzQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=56044/SHA-1 is now in the chain-of-trust
	DS=57335/SHA-256 is now in the chain-of-trust
	`NGA.GOV. 3600 IN DS 56044 5 1 4f5496af6cb147048ec3daefab8ddad62e171dbb`
	`NGA.GOV. 3600 IN DS ( 56044 5 2 ced4c0bfbaf1625a54ad5ecd8ec12d2f04784ead4a2e7f76cbed214708bd728b )`
	`NGA.GOV. 3600 IN DS ( 57335 8 2 80854c7bb20bfa921ff2f1803bc8a13c79ccae9273065a5df4783e4ab9c59b65 )`
	Query to auth1.dns.rcn.net for NGA.GOV/DNSKEY
	Received 2957 bytes from 66.44.1.44
	;; Response received from [66.44.1.44] 2957 octets ;; HEADER SECTION ;; id = 35464 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 12 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN DNSKEY ;; ANSWER SECTION (12 records) nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAahwrof4GXQaRQd+yxZTBZno1u1xgWisP5KPlLm0pd5SEey0LjxL8MS2Cn7lZczaKay60Tvw WSQg9lxV5bINebHIADztBZXNdTPTR3DnJah8+oWN3lTdbq4rdvIo/2omJNfttmIv88Osmdy1Zki7 cZQBnyDKBJORV5xcH3YyqYHGPj1dYPtBC2gJpaNc/1rX4sUtnIU+Zs2KRw5mrkmqxdNij0TalTpm YYz8QP8Cg8P9R+8yXaW7FbAtrMu+OdDSwlIX97gc6pTTwluGtCZo8eKOh8aQc/AUFOCclAWduSun rgrt6T/cfhD2ijQh+XyqFTrT6SRbAZ876iShSovEjW0= ) ; keytag 10338 nga.gov. 3600 IN DNSKEY ( 256 3 5 AwEAAcN5y9fDRhxcFJf047QSYM1W1COPqCD4trFxGjLnwA0XbyCr8RsV30RtJeWtUXL7JY6COGUW FbXSWXsUB4rceOhyR4SRHXUfBvAjdnHejMuuGYi4qhWq2Jtxk2xrshFSIrLM5+J0K2ZAEMru2NWz ppf35txyWLNaBhCAPj8HwnW1 ) ; keytag 21537 nga.gov. 3600 IN DNSKEY ( 257 3 5 AwEAAc90oZMsHfZtGEH5KZiFsk79IIipFEOouNs5V0i4V93TOz5m37n8A+Go9B+DwKEBd5tufgYH sdP6U26xzpbL7PLGFzbc35dVN4SkYO5qke7FZC8wUwUw8cWvn4WtdjXKZ/XYtn6XHN2UUHnr53yG 64Hk9HVJQfvj9sR8unX2G0Mz ) ; keytag 56044 nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaaY9IZGZRI1+OTBniuS+GUg8UNGwa9EYnrRpKldXQwDhyLjeT1Hs3AV3r6f+INA+sxbqZbd NCc8XcP3P/PP1RP1cGrS64a1veRERc9Bgf/T3ZxbrffukaVsBrh93BRJt7xle9nhUCXsXmy5X5W7 T3RWZjz+n/+f9yBtvdMwIhuRtIYhpSjG57mGFq199XGgp0P+LbIYXw6+8B/8OFhOIaxrKO5La61B 9hTwwKJ3Us8G7quqnLcjg7kwfWrfuFW//zORQQvJ63y60vnQ2iVeyyNmN/bXr9t0ynmnme6ptaWU GVdr8oEBoXV97ZFgl7/Qt1kzztjURiQg4kBfpvxT8VM= ) ; keytag 57335 nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAb3N2AAyjpJA74Voxc4/M20Gbsn5v5busCVF1OHDNfr3eG8Zxd7plIw5MXUhJ0nj6HIxUUMp OC1n9jrmbVbKL0GJw2ghD4D1/W/GL3Y+GarDqXq8Z69v2PYvLemGWGMzKtGkMWMp6Jpad/09dL78 WTzMPQoJIS91HbkPC3mr+aEEI9QcZaHep2vgOk6RyDZ8/xA9xhE4TPaHkIo/ZZXbJsTYkV3oGovK OdQ5ViIK14kkQKHRA0ZJuZeEG6x/OxCVGB+v5fhh2bNjTREYiOVPMxZ/dCaEm3oG+jiBUcWrIDXu 2HNhGStb900l4Bl9aaSVW8OzgECe/EZ74+l91Nqnik0= ) ; keytag 42536 nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAeUqBZ61PIDxkxyahFFfvDXA8uiwpaBqUnnv8+igiut8+7dwVW4OvavhQ2sYJWyg+OhwG3hi M+0w8p9kF3JbW7XLyQTF+lTjwnoN9f6uz34rWf2bZV5sT7G/ZDO59Ka/1xEjQRY8ihwPsou4p2jB T1EEAkXCw2N+bAhxfHDbqxJVzonvUo80bLt1WUmc7CfN0pYi3llk2jYCSAfm0PEppxWP3XtBM7Q6 V63Th5U8OhvDTpKGpI4HfvbGvCp8+P29u0T2eLqwZF6VSdEtZCP+C0/DI1K9f8fL8Oe9rlJPO+zL gWgVXhRMUe7VbT+MqYoNBjU8GiWVxDomgMyuugOnBtk= ) ; keytag 65355 nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260420040402 20260321040402 21537 nga.gov. Z9ryZem8SaRlV/A+Y1GegZ2nmGY3zMsjj8Fj29p/sTA7Ibq8CJ+1tEJjT+Yr5QPKU1vUTX9vfaSG AYmi3UctqO4SMPDdgfHQaPT/jVT3ToJ9kfOXBdiqjxh6uS2zIeTMmvwVYemKcGy/SCX5ideLYi0d kXfU7ElFlRO49W0e5ls= ) nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260420040402 20260321040402 56044 nga.gov. aNuCYI5hTmOZXXELqLDobhoBlivCD6933JbhgDRI9hulCgaFWy+/aIcREbpS9YKLM4A0bNzQinsj ytaj8EuWCFw+QFbz3Mkq8y+BTTclNeNjoBWxdtEWHGCMHJ2NsLqz3/xEoClZMFpl+TphT7/JIYbb gvkrNtFsWqkWCll8aog= ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260420040402 20260321040402 10338 nga.gov. oFQuwCunMF6Uan4cQl9uO0cSYtgXwsFWjwJKtJl4TxvgcKa0R15qB9MFmEih+0sbUCQiQWaBazAn g03dpDTa6AH3tNp59UY1bELC+tI8o3DhdahoZPvzqD4fGH9ZAB/rCFx8HDOD6N4+gC4J4PG6ONVh AWXRPRGp9Y8e5JBh4qCs4RS/ANZ+jQdJPRvB8w4jUzgviwd//ergSgabZeXfhoeCfBNUgbN4Q24m RYqJLS2fPmM3sBOaLv8/LlulaD2o7Ta7HfqXFFoN6zr02WYDe2yV7O7Fb+gyX3iPq2xQoz6dy4j2 0Ndj6TAggCFd7tEouy8PN7jPr2o9K5B2ke3r6A== ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260420040402 20260321040402 42536 nga.gov. Z3eCbJMgQWu5iyDQ6HJr2hlKuc1vfMssbIFEdn619ThDb/saZo3xfNFnUevDlKFbIZ3crQv59Yh5 fxCeXqakNlOJcn2YtrsAXlhoX8k1J/CNsDuSJ2skPp0qNwUOhJ0wuKtqTO51nzmvKZ/1jom4KiYW pt4eZ91agIKpbzArRyI/Z3Slfii78kXC0M+EHqlhich75zOtOgh7CbQkGYFehBsIW3U7gVk17l5n G0UyKKmGAVEJdC83mapfDsN2bI/k6yZ+5TFY5qOSiTvGXY+cxrQG84nz83vqLywG2D4a22R+PcIs 1ecnsaRgTxpddWJZhxBgrEPw7Iu0EJ4nGWTlTg== ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260420040402 20260321040402 57335 nga.gov. P0S1CPPW0rdJ5+s00ezxQmPlEY0iUXeCCi/U40gBBx8Kf+/xD5llqcyq02wIb5u8tOthCCSW4Ma2 KvMKTaWN2HLNXcGsFdLwn8Fe1TDpD5QTNreiW3V6ttcAs5r1gqtCgknSGyUg6vjOU5rBZJ7Vojvk 2KArxdDIJdk5QtgqS9iCFm675RgZUh9syg+GIz+BGw1HXiiVmuS+fjjLNM4Bymbklqgom+vU9NtZ zmt6Ig6KlenuUUTMdD4MXQlE4SkeMCSp0NR+itnYWkKwc8jHkSHDYKwfDgE+yzI+A/K/Tm3mr6F/ 3wuJHLwadHKyL5ywxtkKEihUJ9ti4OjbJg8v+Q== ) nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260420040402 20260321040402 65355 nga.gov. L38vhr5gn1qps4svjOcueukwWdj3zHQlf6wKrhXkprFwBd8bEGMAl95JwIrLxm15C/MZYUmPFHpc vRBST3S4Gw7ZbVGX2Xj4A3e8mQvvBc4414+qrmm7FJkLv33IGpiaeQ5odYilMqFXqNiiK+Vj74Kj ZFkU4JEPMbGE4XYT6vcmjM+5KH2yrTXq7J38vrOaZo3qABXRsPUel5wpO9CVIl+0rUARZjkbcxjm 3HX4AcPSDZBOcnSwDzWsfNniCegxJAiW+tmQ5cFzL6u2H779/qLauqUDxjmYxm4SQ7bfCEya1s6o m4BtmcXeNOBUD64qAXAsKD6t7vGKDI5zlbpu3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 6 DNSKEY records for NGA.GOV
	`nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAahwrof4GXQaRQd+yxZTBZno1u1xgWisP5KPlLm0pd5SEey0LjxL8MS2Cn7lZczaKay60Tvw WSQg9lxV5bINebHIADztBZXNdTPTR3DnJah8+oWN3lTdbq4rdvIo/2omJNfttmIv88Osmdy1Zki7 cZQBnyDKBJORV5xcH3YyqYHGPj1dYPtBC2gJpaNc/1rX4sUtnIU+Zs2KRw5mrkmqxdNij0TalTpm YYz8QP8Cg8P9R+8yXaW7FbAtrMu+OdDSwlIX97gc6pTTwluGtCZo8eKOh8aQc/AUFOCclAWduSun rgrt6T/cfhD2ijQh+XyqFTrT6SRbAZ876iShSovEjW0= ) ; keytag 10338`
	`nga.gov. 3600 IN DNSKEY ( 256 3 5 AwEAAcN5y9fDRhxcFJf047QSYM1W1COPqCD4trFxGjLnwA0XbyCr8RsV30RtJeWtUXL7JY6COGUW FbXSWXsUB4rceOhyR4SRHXUfBvAjdnHejMuuGYi4qhWq2Jtxk2xrshFSIrLM5+J0K2ZAEMru2NWz ppf35txyWLNaBhCAPj8HwnW1 ) ; keytag 21537`
	`nga.gov. 3600 IN DNSKEY ( 257 3 5 AwEAAc90oZMsHfZtGEH5KZiFsk79IIipFEOouNs5V0i4V93TOz5m37n8A+Go9B+DwKEBd5tufgYH sdP6U26xzpbL7PLGFzbc35dVN4SkYO5qke7FZC8wUwUw8cWvn4WtdjXKZ/XYtn6XHN2UUHnr53yG 64Hk9HVJQfvj9sR8unX2G0Mz ) ; keytag 56044`
	`nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaaY9IZGZRI1+OTBniuS+GUg8UNGwa9EYnrRpKldXQwDhyLjeT1Hs3AV3r6f+INA+sxbqZbd NCc8XcP3P/PP1RP1cGrS64a1veRERc9Bgf/T3ZxbrffukaVsBrh93BRJt7xle9nhUCXsXmy5X5W7 T3RWZjz+n/+f9yBtvdMwIhuRtIYhpSjG57mGFq199XGgp0P+LbIYXw6+8B/8OFhOIaxrKO5La61B 9hTwwKJ3Us8G7quqnLcjg7kwfWrfuFW//zORQQvJ63y60vnQ2iVeyyNmN/bXr9t0ynmnme6ptaWU GVdr8oEBoXV97ZFgl7/Qt1kzztjURiQg4kBfpvxT8VM= ) ; keytag 57335`
	`nga.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAb3N2AAyjpJA74Voxc4/M20Gbsn5v5busCVF1OHDNfr3eG8Zxd7plIw5MXUhJ0nj6HIxUUMp OC1n9jrmbVbKL0GJw2ghD4D1/W/GL3Y+GarDqXq8Z69v2PYvLemGWGMzKtGkMWMp6Jpad/09dL78 WTzMPQoJIS91HbkPC3mr+aEEI9QcZaHep2vgOk6RyDZ8/xA9xhE4TPaHkIo/ZZXbJsTYkV3oGovK OdQ5ViIK14kkQKHRA0ZJuZeEG6x/OxCVGB+v5fhh2bNjTREYiOVPMxZ/dCaEm3oG+jiBUcWrIDXu 2HNhGStb900l4Bl9aaSVW8OzgECe/EZ74+l91Nqnik0= ) ; keytag 42536`
	`nga.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAeUqBZ61PIDxkxyahFFfvDXA8uiwpaBqUnnv8+igiut8+7dwVW4OvavhQ2sYJWyg+OhwG3hi M+0w8p9kF3JbW7XLyQTF+lTjwnoN9f6uz34rWf2bZV5sT7G/ZDO59Ka/1xEjQRY8ihwPsou4p2jB T1EEAkXCw2N+bAhxfHDbqxJVzonvUo80bLt1WUmc7CfN0pYi3llk2jYCSAfm0PEppxWP3XtBM7Q6 V63Th5U8OhvDTpKGpI4HfvbGvCp8+P29u0T2eLqwZF6VSdEtZCP+C0/DI1K9f8fL8Oe9rlJPO+zL gWgVXhRMUe7VbT+MqYoNBjU8GiWVxDomgMyuugOnBtk= ) ; keytag 65355`
	DNSKEY=56044/SEP is now in the chain-of-trust
	DS=56044/SHA-1 verifies DNSKEY=56044/SEP
	DS=56044/SHA-256 verifies DNSKEY=56044/SEP
	DNSKEY=57335/SEP is now in the chain-of-trust
	DS=57335/SHA-256 verifies DNSKEY=57335/SEP
	Found 6 RRSIGs over DNSKEY RRset
	`nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260420040402 20260321040402 21537 nga.gov. Z9ryZem8SaRlV/A+Y1GegZ2nmGY3zMsjj8Fj29p/sTA7Ibq8CJ+1tEJjT+Yr5QPKU1vUTX9vfaSG AYmi3UctqO4SMPDdgfHQaPT/jVT3ToJ9kfOXBdiqjxh6uS2zIeTMmvwVYemKcGy/SCX5ideLYi0d kXfU7ElFlRO49W0e5ls= )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260420040402 20260321040402 56044 nga.gov. aNuCYI5hTmOZXXELqLDobhoBlivCD6933JbhgDRI9hulCgaFWy+/aIcREbpS9YKLM4A0bNzQinsj ytaj8EuWCFw+QFbz3Mkq8y+BTTclNeNjoBWxdtEWHGCMHJ2NsLqz3/xEoClZMFpl+TphT7/JIYbb gvkrNtFsWqkWCll8aog= )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260420040402 20260321040402 10338 nga.gov. oFQuwCunMF6Uan4cQl9uO0cSYtgXwsFWjwJKtJl4TxvgcKa0R15qB9MFmEih+0sbUCQiQWaBazAn g03dpDTa6AH3tNp59UY1bELC+tI8o3DhdahoZPvzqD4fGH9ZAB/rCFx8HDOD6N4+gC4J4PG6ONVh AWXRPRGp9Y8e5JBh4qCs4RS/ANZ+jQdJPRvB8w4jUzgviwd//ergSgabZeXfhoeCfBNUgbN4Q24m RYqJLS2fPmM3sBOaLv8/LlulaD2o7Ta7HfqXFFoN6zr02WYDe2yV7O7Fb+gyX3iPq2xQoz6dy4j2 0Ndj6TAggCFd7tEouy8PN7jPr2o9K5B2ke3r6A== )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260420040402 20260321040402 42536 nga.gov. Z3eCbJMgQWu5iyDQ6HJr2hlKuc1vfMssbIFEdn619ThDb/saZo3xfNFnUevDlKFbIZ3crQv59Yh5 fxCeXqakNlOJcn2YtrsAXlhoX8k1J/CNsDuSJ2skPp0qNwUOhJ0wuKtqTO51nzmvKZ/1jom4KiYW pt4eZ91agIKpbzArRyI/Z3Slfii78kXC0M+EHqlhich75zOtOgh7CbQkGYFehBsIW3U7gVk17l5n G0UyKKmGAVEJdC83mapfDsN2bI/k6yZ+5TFY5qOSiTvGXY+cxrQG84nz83vqLywG2D4a22R+PcIs 1ecnsaRgTxpddWJZhxBgrEPw7Iu0EJ4nGWTlTg== )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260420040402 20260321040402 57335 nga.gov. P0S1CPPW0rdJ5+s00ezxQmPlEY0iUXeCCi/U40gBBx8Kf+/xD5llqcyq02wIb5u8tOthCCSW4Ma2 KvMKTaWN2HLNXcGsFdLwn8Fe1TDpD5QTNreiW3V6ttcAs5r1gqtCgknSGyUg6vjOU5rBZJ7Vojvk 2KArxdDIJdk5QtgqS9iCFm675RgZUh9syg+GIz+BGw1HXiiVmuS+fjjLNM4Bymbklqgom+vU9NtZ zmt6Ig6KlenuUUTMdD4MXQlE4SkeMCSp0NR+itnYWkKwc8jHkSHDYKwfDgE+yzI+A/K/Tm3mr6F/ 3wuJHLwadHKyL5ywxtkKEihUJ9ti4OjbJg8v+Q== )`
	`nga.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260420040402 20260321040402 65355 nga.gov. L38vhr5gn1qps4svjOcueukwWdj3zHQlf6wKrhXkprFwBd8bEGMAl95JwIrLxm15C/MZYUmPFHpc vRBST3S4Gw7ZbVGX2Xj4A3e8mQvvBc4414+qrmm7FJkLv33IGpiaeQ5odYilMqFXqNiiK+Vj74Kj ZFkU4JEPMbGE4XYT6vcmjM+5KH2yrTXq7J38vrOaZo3qABXRsPUel5wpO9CVIl+0rUARZjkbcxjm 3HX4AcPSDZBOcnSwDzWsfNniCegxJAiW+tmQ5cFzL6u2H779/qLauqUDxjmYxm4SQ7bfCEya1s6o m4BtmcXeNOBUD64qAXAsKD6t7vGKDI5zlbpu3Q== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=56044 and DNSKEY=56044/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the DNSKEY RRset
	RRSIG=42536 and DNSKEY=42536/SEP verifies the DNSKEY RRset
	RRSIG=57335 and DNSKEY=57335/SEP verifies the DNSKEY RRset
	RRSIG=65355 and DNSKEY=65355 verifies the DNSKEY RRset
	DNSKEY=10338 is now in the chain-of-trust
	DNSKEY=21537 is now in the chain-of-trust
	DNSKEY=42536/SEP is now in the chain-of-trust
	DNSKEY=65355 is now in the chain-of-trust
	Query to auth4.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.172.3.22
	;; Response received from [207.172.3.22] 1664 octets ;; HEADER SECTION ;; id = 3428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260420040402 20260321040402 21537 nga.gov. OZzXTgefTP99ICwMBhA5UwWWKVo5V1M/qaz+KH4gOUrFXohPxSH4I/FDFnNsOSWQscPcJgtBKYHX tKHN3rgaEMaSG2spPFx+NIMxRjDLG31tgx51WOoRzf0fq+Hf2fQvSz3oWJk3TsurnDcpml37DZPx 8L5Kb0oPYgAdKqtsNdw= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 10338 nga.gov. iKS5SIgEpOMmrBKEKyPfVSTXuonl/I6ZXcTWTfOIiqOMChq9hI44HgAkiEIgWrt2lDu6W1mHsPiy xcikCpV2humA5PAaeiAKj0s+dHtPcNVW9sY5X5Lso2vLt/x7D5c2ravHkwy5bed5Wwyl5R6nPYVw Bb99xjpCNFE4cfunF4Te8wQiO4NO5lm6Q/7NwdgxvBYJGiEtOEorlP2UcDqpN9PUBDVdIfHD8eE4 UgaavRqThtAbKWoRVhTJc0TaAc9NWfWLRxWvlgRczBynvt175gTiOnOUzYS90tdAlUnUFkY4sS3f cx177Qxu93cNQsEX7sbbgXYhisQQ0OrRSnfKVA== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 65355 nga.gov. QUVlNSBlqcMoHmDZ0HbQHXcD3sbVm1anqOcKPbxxooVBNXVqNxdUpKuz2BfnrHKzZz05JK34+mbA 99rY8pTYdoGUWkDS/0iYzGOtVQQ09jMxPt41tRR/Br6A7t5tBxzV0fAqprUO7LCZGyBiyGGtYT4B mtHjzZhjZg6YR80AuPC77UDwzoVU9Dc9qDxc7s7YVCx88jZbb6sfht9w2XtKRpuNxsRhzQ4Rrq3H mYKloWJLDyep3QgVvDtrDfsmff73m693RNJLmYLSfcF0pe0BjXj6rfMDSo72xARkfPfXPV/FbLTX gxPBSv5LTdKSEM0p1bv0CaKmFUOUOJiI+J4Mrw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth4.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth2.dns.rcn.net for NGA.GOV/SOA
	Received 1709 bytes from 207.172.11.14
	;; Response received from [207.172.11.14] 1709 octets ;; HEADER SECTION ;; id = 7056 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (4 records) nga.gov. 3600 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2026032101 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 3600 IN RRSIG ( SOA 5 2 3600 20260420040402 20260321040402 21537 nga.gov. HRKPX98UnWvqZKTide259tZuuXwVO8Sdk7K7dH1zRue+PVXjJnd9XAN6v3B9dP/JTXSh5UfSNEOF UwowOyf7aP1m39aBFtIt6B94UU58GfTE2SN7w8v5kpDOnTZTT5SKOTF12KrRSgZWicn56mAnovpn MTqWOSx3SAbwYLY5I0A= ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260420040402 20260321040402 10338 nga.gov. OroU2RuxuKmF22E4AXX9fvXf4ZdmetkbXdwmABlQGwdEZ2dxJnVty2eKLWBg/x8cpQjmM8/rgDhE klgWklFhRufHOHweVO6Rap3vv81klpSDsZd6N3uW9KKisjyg+EWB7Grjg0SmiqXh9sb8nTxnMlX7 g1Wq1l4kB0WXV8FXGUZEiZp6i97vGvjbWJV6o7CHSQAJNdoQbWkk9VtYl1f8OhZhyl8Bd5AwTc1L coFSBaFOojyRQn+fUoC9Tl0DuRpaTBeaBI27n0+5Nf4y7wJvZshjN98JqsH6n3QyWYveKXyfqn6c RKRL8QzLxHMifNQ8dUeNRbIUgCubajcgUaShiQ== ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260420040402 20260321040402 65355 nga.gov. Em+NjQjQLF02Wcca7Laxq8us7mX1thUrvzVBvetBwggAlKE/qW4o7k/OSNH8payIiUVoEOCpNubq NazmC9ztxS23AHVGkpbshpc4RczWy/UhafFVlat6YFWU4mWNH9cWtYOIGUC6wuJC2VCZ5corrI7z /rnRqxv+usCKkNhG/WeXTe7oHyHxyRJuVOx2bsJsIoJotvCniu5YUo/mrALAGBQD15OiiBqpywa+ J8h9+9NahtrJHvLABBC6JVz4WdagzBWt9ToIQ8hlDIMlh8DEm3V+MaRxb85glRmgkHXZ+S9mEfjF hV38aS1zoVCO4hG4PudoUGOUrJnwG5l15UsIsA== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260420040402 20260321040402 21537 nga.gov. OZzXTgefTP99ICwMBhA5UwWWKVo5V1M/qaz+KH4gOUrFXohPxSH4I/FDFnNsOSWQscPcJgtBKYHX tKHN3rgaEMaSG2spPFx+NIMxRjDLG31tgx51WOoRzf0fq+Hf2fQvSz3oWJk3TsurnDcpml37DZPx 8L5Kb0oPYgAdKqtsNdw= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 10338 nga.gov. iKS5SIgEpOMmrBKEKyPfVSTXuonl/I6ZXcTWTfOIiqOMChq9hI44HgAkiEIgWrt2lDu6W1mHsPiy xcikCpV2humA5PAaeiAKj0s+dHtPcNVW9sY5X5Lso2vLt/x7D5c2ravHkwy5bed5Wwyl5R6nPYVw Bb99xjpCNFE4cfunF4Te8wQiO4NO5lm6Q/7NwdgxvBYJGiEtOEorlP2UcDqpN9PUBDVdIfHD8eE4 UgaavRqThtAbKWoRVhTJc0TaAc9NWfWLRxWvlgRczBynvt175gTiOnOUzYS90tdAlUnUFkY4sS3f cx177Qxu93cNQsEX7sbbgXYhisQQ0OrRSnfKVA== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 65355 nga.gov. QUVlNSBlqcMoHmDZ0HbQHXcD3sbVm1anqOcKPbxxooVBNXVqNxdUpKuz2BfnrHKzZz05JK34+mbA 99rY8pTYdoGUWkDS/0iYzGOtVQQ09jMxPt41tRR/Br6A7t5tBxzV0fAqprUO7LCZGyBiyGGtYT4B mtHjzZhjZg6YR80AuPC77UDwzoVU9Dc9qDxc7s7YVCx88jZbb6sfht9w2XtKRpuNxsRhzQ4Rrq3H mYKloWJLDyep3QgVvDtrDfsmff73m693RNJLmYLSfcF0pe0BjXj6rfMDSo72xARkfPfXPV/FbLTX gxPBSv5LTdKSEM0p1bv0CaKmFUOUOJiI+J4Mrw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth3.dns.rcn.net for NGA.GOV/SOA
	Received 1709 bytes from 207.96.3.153
	;; Response received from [207.96.3.153] 1709 octets ;; HEADER SECTION ;; id = 52779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (4 records) nga.gov. 3600 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2026032001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 3600 IN RRSIG ( SOA 5 2 3600 20260419040402 20260320040402 21537 nga.gov. wVrzRaE1y4frR461S0NCQq+clhTO58SslayuEzg7Ta2QFLKH9nUs13JAIImHKujTaSm1RWMDT3pJ AaEZPZv6FEZzRVsNXAp19bjkj35+ReinjVIOmZd6/OiPAptbaaxkxCdWL1+AxljYAksfVY+RiXIi zaFk0qBgVHv80R616Yc= ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260419040402 20260320040402 10338 nga.gov. VvsazaP8iYf4mMhsVmVsBrITTyXe4OdXP+YRmuyWS4uXdutGQBhlCOrQleFo/odYHHVi8aDs8qaL MxIm1I8759N9/KARFfrziXbUMgiVWWHt0iINpvAYB8b/TweClyaOWhKmiq2vSVJQfD6pSXiFZ2N5 ds5950JlBzKjlgCfZuy3BHzx88ZsehpsUYc0faUWAhs9SAHEZ1WiuWkUCd/48GmiJq1GWnSv4I5t 6uNjSCLUbdKpaCWc8nWtOmet3kCuPVu8tK/u7VPCfTAqWpfvbZ11p0oB8VCVyQNRRfvavxJeIQus T3uGpHvDjKwL5hxsptNf/sj6xVX3FPdFs70t0g== ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260419040402 20260320040402 65355 nga.gov. yCj5Fxn1WS+LARWFbElyf96xd4Bv7FXUwZSs969ZlSVC4G5z2/hF3+sREKUshla7vJxWqoSizksr VV/BV45uaMTYTRsQIkpR0V3cF1xYRN+5Bx4cWY5GK62zSJOP1sM56CNy/kdtvDTyE/egH/9Hiv7t 4ERFre73HmHSZDQFEmxLuu/lkJcCmsVNGSp5DhfeU14VeDrzhbkV5WJjvQ7CtqhNqiTb+7sBFqIX qjfbxIAnWD7Y3gIcD8VvDoxTYGkq5CTZlWx5zpxdZKAGwIzo5YmSS69wiZdIvjLUIOBNO7ttxrPt QrgGwvF6A1FsEQNEuaeHgz6+OsNj5hIuUB108Q== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260419040402 20260320040402 21537 nga.gov. f/XwziqBSG7VxW9MTM5ON1w+go9xnp3kk/BWHQ05sH1toz85OrwnDhBrr3qu4IzvPpAAlr0EDiUZ Rt7PKlt/7bigGuNC7nGZf/9TiP9nUGQ3vxF5EPk3dGTiRWXDIrnQMJvqhZ32yelLQYUmtDPSCKnJ kyepOJX6diNCdL9v1sE= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260419040402 20260320040402 10338 nga.gov. RfOuQ+XHRriyQ9fQkQkAV0b0OV5n3nZ/Ll74XUaVmVp0pkXpVK4UUSRi0qyD8j0xAshgj3w9lAWL cX9pV3WNVH4+SGnAKxOHQ5AFFWALwCPtQqG52BJ13vJh845FZoR9574Y88VYltyh5TJ50sOZwqzz L2yYo8sD5eSxjON9Q8N5vmMYyH3EZD67A1btHa3MgPES4gouUxvzHESV+z/q0CevJrDlQzu2xMq0 //V1MGkP5QClMWgUEglDzfGDuPOIWoaH31M2E6V1w8eJQ5sAykBZrvMFgyeVCPB5XandEuvI6lxa rgF6qN88Ta3qvjT5tvRqbLTcBsRCesHopv0wPw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260419040402 20260320040402 65355 nga.gov. KgN+eQKWyh/4DH3naC7D5ac0RAYzHXJ/2rlE3PbHJNg+le3eHRnLUM6R09QK3EWHZAwdj73B0ys1 uOKunx9C0uqHyYaUpr5VmhSolhqB9DVaqJKxCrOPPc2lbIf5E0AlMRkEEcXKjGiKskFCNuNP/ZNx QgRmF2fFlJtYZJdDcjNefEHfdPsjERYi1jMM6L/7HwBkjdfjjdvwUFl9fE2KEu2qfXSHoBvAsYnE zHqSrch7INbuQ0O+J4gCmcHERqt4c2pG3QPuvPhMXgC8vxcMPcJ/oxlfB6gD6aPIjOiNrNDYsfQG imV5qGd+9Du77lCw8dNCp4M/YYEM/6bLfpkbGQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth3.dns.rcn.net serial (2026032001) differs from auth2.dns.rcn.net serial (2026032101)
	Query to auth1.dns.rcn.net for NGA.GOV/SOA
	Received 1709 bytes from 66.44.1.44
	;; Response received from [66.44.1.44] 1709 octets ;; HEADER SECTION ;; id = 56724 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN SOA ;; ANSWER SECTION (4 records) nga.gov. 3600 IN SOA ( master.dns.rcn.net. hostmaster.rcn.com. 2026032101 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nga.gov. 3600 IN RRSIG ( SOA 5 2 3600 20260420040402 20260321040402 21537 nga.gov. HRKPX98UnWvqZKTide259tZuuXwVO8Sdk7K7dH1zRue+PVXjJnd9XAN6v3B9dP/JTXSh5UfSNEOF UwowOyf7aP1m39aBFtIt6B94UU58GfTE2SN7w8v5kpDOnTZTT5SKOTF12KrRSgZWicn56mAnovpn MTqWOSx3SAbwYLY5I0A= ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260420040402 20260321040402 10338 nga.gov. OroU2RuxuKmF22E4AXX9fvXf4ZdmetkbXdwmABlQGwdEZ2dxJnVty2eKLWBg/x8cpQjmM8/rgDhE klgWklFhRufHOHweVO6Rap3vv81klpSDsZd6N3uW9KKisjyg+EWB7Grjg0SmiqXh9sb8nTxnMlX7 g1Wq1l4kB0WXV8FXGUZEiZp6i97vGvjbWJV6o7CHSQAJNdoQbWkk9VtYl1f8OhZhyl8Bd5AwTc1L coFSBaFOojyRQn+fUoC9Tl0DuRpaTBeaBI27n0+5Nf4y7wJvZshjN98JqsH6n3QyWYveKXyfqn6c RKRL8QzLxHMifNQ8dUeNRbIUgCubajcgUaShiQ== ) nga.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260420040402 20260321040402 65355 nga.gov. Em+NjQjQLF02Wcca7Laxq8us7mX1thUrvzVBvetBwggAlKE/qW4o7k/OSNH8payIiUVoEOCpNubq NazmC9ztxS23AHVGkpbshpc4RczWy/UhafFVlat6YFWU4mWNH9cWtYOIGUC6wuJC2VCZ5corrI7z /rnRqxv+usCKkNhG/WeXTe7oHyHxyRJuVOx2bsJsIoJotvCniu5YUo/mrALAGBQD15OiiBqpywa+ J8h9+9NahtrJHvLABBC6JVz4WdagzBWt9ToIQ8hlDIMlh8DEm3V+MaRxb85glRmgkHXZ+S9mEfjF hV38aS1zoVCO4hG4PudoUGOUrJnwG5l15UsIsA== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260420040402 20260321040402 21537 nga.gov. OZzXTgefTP99ICwMBhA5UwWWKVo5V1M/qaz+KH4gOUrFXohPxSH4I/FDFnNsOSWQscPcJgtBKYHX tKHN3rgaEMaSG2spPFx+NIMxRjDLG31tgx51WOoRzf0fq+Hf2fQvSz3oWJk3TsurnDcpml37DZPx 8L5Kb0oPYgAdKqtsNdw= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 10338 nga.gov. iKS5SIgEpOMmrBKEKyPfVSTXuonl/I6ZXcTWTfOIiqOMChq9hI44HgAkiEIgWrt2lDu6W1mHsPiy xcikCpV2humA5PAaeiAKj0s+dHtPcNVW9sY5X5Lso2vLt/x7D5c2ravHkwy5bed5Wwyl5R6nPYVw Bb99xjpCNFE4cfunF4Te8wQiO4NO5lm6Q/7NwdgxvBYJGiEtOEorlP2UcDqpN9PUBDVdIfHD8eE4 UgaavRqThtAbKWoRVhTJc0TaAc9NWfWLRxWvlgRczBynvt175gTiOnOUzYS90tdAlUnUFkY4sS3f cx177Qxu93cNQsEX7sbbgXYhisQQ0OrRSnfKVA== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 65355 nga.gov. QUVlNSBlqcMoHmDZ0HbQHXcD3sbVm1anqOcKPbxxooVBNXVqNxdUpKuz2BfnrHKzZz05JK34+mbA 99rY8pTYdoGUWkDS/0iYzGOtVQQ09jMxPt41tRR/Br6A7t5tBxzV0fAqprUO7LCZGyBiyGGtYT4B mtHjzZhjZg6YR80AuPC77UDwzoVU9Dc9qDxc7s7YVCx88jZbb6sfht9w2XtKRpuNxsRhzQ4Rrq3H mYKloWJLDyep3QgVvDtrDfsmff73m693RNJLmYLSfcF0pe0BjXj6rfMDSo72xARkfPfXPV/FbLTX gxPBSv5LTdKSEM0p1bv0CaKmFUOUOJiI+J4Mrw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth4.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 208.59.89.9
	;; Response received from [208.59.89.9] 1664 octets ;; HEADER SECTION ;; id = 41080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260420040402 20260321040402 21537 nga.gov. OZzXTgefTP99ICwMBhA5UwWWKVo5V1M/qaz+KH4gOUrFXohPxSH4I/FDFnNsOSWQscPcJgtBKYHX tKHN3rgaEMaSG2spPFx+NIMxRjDLG31tgx51WOoRzf0fq+Hf2fQvSz3oWJk3TsurnDcpml37DZPx 8L5Kb0oPYgAdKqtsNdw= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 10338 nga.gov. iKS5SIgEpOMmrBKEKyPfVSTXuonl/I6ZXcTWTfOIiqOMChq9hI44HgAkiEIgWrt2lDu6W1mHsPiy xcikCpV2humA5PAaeiAKj0s+dHtPcNVW9sY5X5Lso2vLt/x7D5c2ravHkwy5bed5Wwyl5R6nPYVw Bb99xjpCNFE4cfunF4Te8wQiO4NO5lm6Q/7NwdgxvBYJGiEtOEorlP2UcDqpN9PUBDVdIfHD8eE4 UgaavRqThtAbKWoRVhTJc0TaAc9NWfWLRxWvlgRczBynvt175gTiOnOUzYS90tdAlUnUFkY4sS3f cx177Qxu93cNQsEX7sbbgXYhisQQ0OrRSnfKVA== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 65355 nga.gov. QUVlNSBlqcMoHmDZ0HbQHXcD3sbVm1anqOcKPbxxooVBNXVqNxdUpKuz2BfnrHKzZz05JK34+mbA 99rY8pTYdoGUWkDS/0iYzGOtVQQ09jMxPt41tRR/Br6A7t5tBxzV0fAqprUO7LCZGyBiyGGtYT4B mtHjzZhjZg6YR80AuPC77UDwzoVU9Dc9qDxc7s7YVCx88jZbb6sfht9w2XtKRpuNxsRhzQ4Rrq3H mYKloWJLDyep3QgVvDtrDfsmff73m693RNJLmYLSfcF0pe0BjXj6rfMDSo72xARkfPfXPV/FbLTX gxPBSv5LTdKSEM0p1bv0CaKmFUOUOJiI+J4Mrw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth2.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.237.14.120
	;; Response received from [207.237.14.120] 1664 octets ;; HEADER SECTION ;; id = 16213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260420040402 20260321040402 21537 nga.gov. OZzXTgefTP99ICwMBhA5UwWWKVo5V1M/qaz+KH4gOUrFXohPxSH4I/FDFnNsOSWQscPcJgtBKYHX tKHN3rgaEMaSG2spPFx+NIMxRjDLG31tgx51WOoRzf0fq+Hf2fQvSz3oWJk3TsurnDcpml37DZPx 8L5Kb0oPYgAdKqtsNdw= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 10338 nga.gov. iKS5SIgEpOMmrBKEKyPfVSTXuonl/I6ZXcTWTfOIiqOMChq9hI44HgAkiEIgWrt2lDu6W1mHsPiy xcikCpV2humA5PAaeiAKj0s+dHtPcNVW9sY5X5Lso2vLt/x7D5c2ravHkwy5bed5Wwyl5R6nPYVw Bb99xjpCNFE4cfunF4Te8wQiO4NO5lm6Q/7NwdgxvBYJGiEtOEorlP2UcDqpN9PUBDVdIfHD8eE4 UgaavRqThtAbKWoRVhTJc0TaAc9NWfWLRxWvlgRczBynvt175gTiOnOUzYS90tdAlUnUFkY4sS3f cx177Qxu93cNQsEX7sbbgXYhisQQ0OrRSnfKVA== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 65355 nga.gov. QUVlNSBlqcMoHmDZ0HbQHXcD3sbVm1anqOcKPbxxooVBNXVqNxdUpKuz2BfnrHKzZz05JK34+mbA 99rY8pTYdoGUWkDS/0iYzGOtVQQ09jMxPt41tRR/Br6A7t5tBxzV0fAqprUO7LCZGyBiyGGtYT4B mtHjzZhjZg6YR80AuPC77UDwzoVU9Dc9qDxc7s7YVCx88jZbb6sfht9w2XtKRpuNxsRhzQ4Rrq3H mYKloWJLDyep3QgVvDtrDfsmff73m693RNJLmYLSfcF0pe0BjXj6rfMDSo72xARkfPfXPV/FbLTX gxPBSv5LTdKSEM0p1bv0CaKmFUOUOJiI+J4Mrw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth2.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth2.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.237.14.120
	;; Response received from [207.237.14.120] 1664 octets ;; HEADER SECTION ;; id = 29679 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260420040402 20260321040402 21537 nga.gov. OZzXTgefTP99ICwMBhA5UwWWKVo5V1M/qaz+KH4gOUrFXohPxSH4I/FDFnNsOSWQscPcJgtBKYHX tKHN3rgaEMaSG2spPFx+NIMxRjDLG31tgx51WOoRzf0fq+Hf2fQvSz3oWJk3TsurnDcpml37DZPx 8L5Kb0oPYgAdKqtsNdw= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 10338 nga.gov. iKS5SIgEpOMmrBKEKyPfVSTXuonl/I6ZXcTWTfOIiqOMChq9hI44HgAkiEIgWrt2lDu6W1mHsPiy xcikCpV2humA5PAaeiAKj0s+dHtPcNVW9sY5X5Lso2vLt/x7D5c2ravHkwy5bed5Wwyl5R6nPYVw Bb99xjpCNFE4cfunF4Te8wQiO4NO5lm6Q/7NwdgxvBYJGiEtOEorlP2UcDqpN9PUBDVdIfHD8eE4 UgaavRqThtAbKWoRVhTJc0TaAc9NWfWLRxWvlgRczBynvt175gTiOnOUzYS90tdAlUnUFkY4sS3f cx177Qxu93cNQsEX7sbbgXYhisQQ0OrRSnfKVA== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 65355 nga.gov. QUVlNSBlqcMoHmDZ0HbQHXcD3sbVm1anqOcKPbxxooVBNXVqNxdUpKuz2BfnrHKzZz05JK34+mbA 99rY8pTYdoGUWkDS/0iYzGOtVQQ09jMxPt41tRR/Br6A7t5tBxzV0fAqprUO7LCZGyBiyGGtYT4B mtHjzZhjZg6YR80AuPC77UDwzoVU9Dc9qDxc7s7YVCx88jZbb6sfht9w2XtKRpuNxsRhzQ4Rrq3H mYKloWJLDyep3QgVvDtrDfsmff73m693RNJLmYLSfcF0pe0BjXj6rfMDSo72xARkfPfXPV/FbLTX gxPBSv5LTdKSEM0p1bv0CaKmFUOUOJiI+J4Mrw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth1.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 66.44.1.44
	;; Response received from [66.44.1.44] 1664 octets ;; HEADER SECTION ;; id = 44184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260420040402 20260321040402 21537 nga.gov. OZzXTgefTP99ICwMBhA5UwWWKVo5V1M/qaz+KH4gOUrFXohPxSH4I/FDFnNsOSWQscPcJgtBKYHX tKHN3rgaEMaSG2spPFx+NIMxRjDLG31tgx51WOoRzf0fq+Hf2fQvSz3oWJk3TsurnDcpml37DZPx 8L5Kb0oPYgAdKqtsNdw= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 10338 nga.gov. iKS5SIgEpOMmrBKEKyPfVSTXuonl/I6ZXcTWTfOIiqOMChq9hI44HgAkiEIgWrt2lDu6W1mHsPiy xcikCpV2humA5PAaeiAKj0s+dHtPcNVW9sY5X5Lso2vLt/x7D5c2ravHkwy5bed5Wwyl5R6nPYVw Bb99xjpCNFE4cfunF4Te8wQiO4NO5lm6Q/7NwdgxvBYJGiEtOEorlP2UcDqpN9PUBDVdIfHD8eE4 UgaavRqThtAbKWoRVhTJc0TaAc9NWfWLRxWvlgRczBynvt175gTiOnOUzYS90tdAlUnUFkY4sS3f cx177Qxu93cNQsEX7sbbgXYhisQQ0OrRSnfKVA== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 65355 nga.gov. QUVlNSBlqcMoHmDZ0HbQHXcD3sbVm1anqOcKPbxxooVBNXVqNxdUpKuz2BfnrHKzZz05JK34+mbA 99rY8pTYdoGUWkDS/0iYzGOtVQQ09jMxPt41tRR/Br6A7t5tBxzV0fAqprUO7LCZGyBiyGGtYT4B mtHjzZhjZg6YR80AuPC77UDwzoVU9Dc9qDxc7s7YVCx88jZbb6sfht9w2XtKRpuNxsRhzQ4Rrq3H mYKloWJLDyep3QgVvDtrDfsmff73m693RNJLmYLSfcF0pe0BjXj6rfMDSo72xARkfPfXPV/FbLTX gxPBSv5LTdKSEM0p1bv0CaKmFUOUOJiI+J4Mrw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth1.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth1.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.172.3.20
	;; Response received from [207.172.3.20] 1664 octets ;; HEADER SECTION ;; id = 11322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260420040402 20260321040402 21537 nga.gov. OZzXTgefTP99ICwMBhA5UwWWKVo5V1M/qaz+KH4gOUrFXohPxSH4I/FDFnNsOSWQscPcJgtBKYHX tKHN3rgaEMaSG2spPFx+NIMxRjDLG31tgx51WOoRzf0fq+Hf2fQvSz3oWJk3TsurnDcpml37DZPx 8L5Kb0oPYgAdKqtsNdw= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 10338 nga.gov. iKS5SIgEpOMmrBKEKyPfVSTXuonl/I6ZXcTWTfOIiqOMChq9hI44HgAkiEIgWrt2lDu6W1mHsPiy xcikCpV2humA5PAaeiAKj0s+dHtPcNVW9sY5X5Lso2vLt/x7D5c2ravHkwy5bed5Wwyl5R6nPYVw Bb99xjpCNFE4cfunF4Te8wQiO4NO5lm6Q/7NwdgxvBYJGiEtOEorlP2UcDqpN9PUBDVdIfHD8eE4 UgaavRqThtAbKWoRVhTJc0TaAc9NWfWLRxWvlgRczBynvt175gTiOnOUzYS90tdAlUnUFkY4sS3f cx177Qxu93cNQsEX7sbbgXYhisQQ0OrRSnfKVA== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260420040402 20260321040402 65355 nga.gov. QUVlNSBlqcMoHmDZ0HbQHXcD3sbVm1anqOcKPbxxooVBNXVqNxdUpKuz2BfnrHKzZz05JK34+mbA 99rY8pTYdoGUWkDS/0iYzGOtVQQ09jMxPt41tRR/Br6A7t5tBxzV0fAqprUO7LCZGyBiyGGtYT4B mtHjzZhjZg6YR80AuPC77UDwzoVU9Dc9qDxc7s7YVCx88jZbb6sfht9w2XtKRpuNxsRhzQ4Rrq3H mYKloWJLDyep3QgVvDtrDfsmff73m693RNJLmYLSfcF0pe0BjXj6rfMDSo72xARkfPfXPV/FbLTX gxPBSv5LTdKSEM0p1bv0CaKmFUOUOJiI+J4Mrw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

NGA.GOV

	Query to auth3.dns.rcn.net for NGA.GOV/A
	Received 809 bytes from 207.172.3.21
	;; Response received from [207.172.3.21] 809 octets ;; HEADER SECTION ;; id = 58155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) NGA.GOV. 3600 IN A 199.16.64.40 NGA.GOV. 3600 IN RRSIG ( A 5 2 3600 20260420040402 20260321040402 21537 nga.gov. P+d+vIyfx9Y9fYlm8Sp5bHYst+jTJQboJ+rMQXYNPIIrx/2P7kU625/G6Dklywp+OtCTGRCeGLyH 5bfbS++Daj6wq5GnANDMiDB+cqbyfeRrPKjvHKPPtEiKt1G1M7r4ANAXBQ34q2MXm45J1/EyqzAj TUxNgn5hqqAjjAoW6e4= ) NGA.GOV. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 10338 nga.gov. L0z0HjnURC4VEAGp7U6N8KzJK/Tl3bwC05CSPgVU89ZJUbZLRK/g2EYdCqfkkVETqV62qu+CUmT+ tKdE4kkE3U5TqF9kKaZScBn+krtGW8aTBue2jDWP5NqF3XladsenGUaiuuWCQ6bRKlo9j8FwTpwR 5NI6P/FAZGvTQ8YbQb5HnxGdIkbQ/31fsZvmJt7SqEiqPcgzuNHKpZttQP90TFYYYZfYlbJlv6pN XJ4ba9b+fzykaSyWF8Ka2JhhOE8W2bBN87cY6X7E19gEOVaNQCMWSACXS5ZGANQoxcem7L/ek0LO Asz4va06/f2elHxKAo5Et8GfkrQ4aqENvexOmQ== ) NGA.GOV. 3600 IN RRSIG ( A 8 2 3600 20260420040402 20260321040402 65355 nga.gov. 4tOUfuco0vydF6Z0YPmAwkElHg/jP3G+6G3qaquKzgimHH52bNvqK9Tsa0Zf3AygD7ks0v4ewQQH Tno590VNo2c5T0/R3zjlhdBy/JMbVcxE2B//KZgiT80UeqS6pWW6nzllHe+HHgiO+vXETB79WoWZ kneM599nB3dlh4C+YAyPZoxg/pbcmV40PvnjomzMPEuWVhYVJYtQvyRj0DuxIpHqWCa4PDBxQ1Sr zNVLC9m3JNp3S0JBEYJ6jiaEw232FFC2rc+bewQr4N9Ycsl78A7v+8dO9Ou6NU7a/Aum0JcC1mR7 fs9ROjL/EvEHhxpk7/N/jfmEy4YejIbQdlHR5Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth3.dns.rcn.net is authoritative for NGA.GOV
	Found RRSIG signed by nga.gov zone
	Query to auth3.dns.rcn.net for NGA.GOV/A
	Received 1664 bytes from 207.96.3.153
	;; Response received from [207.96.3.153] 1664 octets ;; HEADER SECTION ;; id = 14538 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NGA.GOV. IN A ;; ANSWER SECTION (4 records) nga.gov. 3600 IN A 199.16.64.40 nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260419040402 20260320040402 21537 nga.gov. YAYaOzZDtlv3BmRxieNlsYrksy1N6nwxOzHnrOsV0MZHAh7u73KjZH4s5nsqaF0U4iUiedEHsvV9 PUSk1BQzuthEmcxPz5+r0mFN4vN2XgrYFvmtJzRFm96hP/h3O7zD+7LZDC1lSigb3YCPbYDUEBXt v14rkFGNFJIc0kM7Zho= ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260419040402 20260320040402 10338 nga.gov. TGLKBo7TbHtUlIY7JPQLOZArYMYQTtiscrEsv7NkMcTpNVb349QH99OgeTVQ0rUE/08ztv/WRUMR ekjpSRBonxvrwgYZf7O7aYuBLvP5TCblIfcrDYsOBIfF+pTo66ym2SNkjHTJPnElat0AbrFx+pPX /Pf8JtJ0IDO0tOn4G2ECdealU0/LWegcVhSmAB0W96BDH7PJdAbI5+YUcOAJ7nj+3YiEytb0hO6s tzIBUdHBNPvyTPoX0NHwAPl7sgTgD7A1Wa3/2bMC6LADp3NGrDlC1qb09cb0or58hDS45bdtSv/p s3i9clCtvn8h+ODBuRkbQZgYN7zMzkFUfcdx+Q== ) nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260419040402 20260320040402 65355 nga.gov. zp4NjeSjka2zB24O6IaYh1e3w6el+irCcGi2ahZ5z4FlVef6VPWAYmKMo8MQBZnYzubsjKZfT942 5dSY9QlTkmp6OVSiWDmGRNo/CFzXLkYzh4QkydeEsDTnQ/7GmDd1txycjLqnHS+KGCelZ4JDQCmU bUurBmjdaQpupMTPjK7++H0aJVkoO64dzHwOn9yo4UIPuyxljun3LwujSs+Awhi+l829slh+ULiV BkXLZZFvE5YGeue7ujJw5bzFPgcip9E+wLGC2FyX8s32s2LrdBuBmGg/W+SSQ3naZK7SnWg0IBLp eiRmGrI5AAN+zgXLxg8nix/RqTTqFW90/hyLNg== ) ;; AUTHORITY SECTION (7 records) nga.gov. 86400 IN NS auth4.dns.rcn.net. nga.gov. 86400 IN NS auth1.dns.rcn.net. nga.gov. 86400 IN NS auth2.dns.rcn.net. nga.gov. 86400 IN NS auth3.dns.rcn.net. nga.gov. 86400 IN RRSIG ( NS 5 2 86400 20260419040402 20260320040402 21537 nga.gov. f/XwziqBSG7VxW9MTM5ON1w+go9xnp3kk/BWHQ05sH1toz85OrwnDhBrr3qu4IzvPpAAlr0EDiUZ Rt7PKlt/7bigGuNC7nGZf/9TiP9nUGQ3vxF5EPk3dGTiRWXDIrnQMJvqhZ32yelLQYUmtDPSCKnJ kyepOJX6diNCdL9v1sE= ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260419040402 20260320040402 10338 nga.gov. RfOuQ+XHRriyQ9fQkQkAV0b0OV5n3nZ/Ll74XUaVmVp0pkXpVK4UUSRi0qyD8j0xAshgj3w9lAWL cX9pV3WNVH4+SGnAKxOHQ5AFFWALwCPtQqG52BJ13vJh845FZoR9574Y88VYltyh5TJ50sOZwqzz L2yYo8sD5eSxjON9Q8N5vmMYyH3EZD67A1btHa3MgPES4gouUxvzHESV+z/q0CevJrDlQzu2xMq0 //V1MGkP5QClMWgUEglDzfGDuPOIWoaH31M2E6V1w8eJQ5sAykBZrvMFgyeVCPB5XandEuvI6lxa rgF6qN88Ta3qvjT5tvRqbLTcBsRCesHopv0wPw== ) nga.gov. 86400 IN RRSIG ( NS 8 2 86400 20260419040402 20260320040402 65355 nga.gov. KgN+eQKWyh/4DH3naC7D5ac0RAYzHXJ/2rlE3PbHJNg+le3eHRnLUM6R09QK3EWHZAwdj73B0ys1 uOKunx9C0uqHyYaUpr5VmhSolhqB9DVaqJKxCrOPPc2lbIf5E0AlMRkEEcXKjGiKskFCNuNP/ZNx QgRmF2fFlJtYZJdDcjNefEHfdPsjERYi1jMM6L/7HwBkjdfjjdvwUFl9fE2KEu2qfXSHoBvAsYnE zHqSrch7INbuQ0O+J4gCmcHERqt4c2pG3QPuvPhMXgC8vxcMPcJ/oxlfB6gD6aPIjOiNrNDYsfQG imV5qGd+9Du77lCw8dNCp4M/YYEM/6bLfpkbGQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NGA.GOV A RR has value 199.16.64.40
	Found 3 RRSIGs over A RRset
	`nga.gov. 3600 IN RRSIG ( A 5 2 3600 20260419040402 20260320040402 21537 nga.gov. YAYaOzZDtlv3BmRxieNlsYrksy1N6nwxOzHnrOsV0MZHAh7u73KjZH4s5nsqaF0U4iUiedEHsvV9 PUSk1BQzuthEmcxPz5+r0mFN4vN2XgrYFvmtJzRFm96hP/h3O7zD+7LZDC1lSigb3YCPbYDUEBXt v14rkFGNFJIc0kM7Zho= )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260419040402 20260320040402 10338 nga.gov. TGLKBo7TbHtUlIY7JPQLOZArYMYQTtiscrEsv7NkMcTpNVb349QH99OgeTVQ0rUE/08ztv/WRUMR ekjpSRBonxvrwgYZf7O7aYuBLvP5TCblIfcrDYsOBIfF+pTo66ym2SNkjHTJPnElat0AbrFx+pPX /Pf8JtJ0IDO0tOn4G2ECdealU0/LWegcVhSmAB0W96BDH7PJdAbI5+YUcOAJ7nj+3YiEytb0hO6s tzIBUdHBNPvyTPoX0NHwAPl7sgTgD7A1Wa3/2bMC6LADp3NGrDlC1qb09cb0or58hDS45bdtSv/p s3i9clCtvn8h+ODBuRkbQZgYN7zMzkFUfcdx+Q== )`
	`nga.gov. 3600 IN RRSIG ( A 8 2 3600 20260419040402 20260320040402 65355 nga.gov. zp4NjeSjka2zB24O6IaYh1e3w6el+irCcGi2ahZ5z4FlVef6VPWAYmKMo8MQBZnYzubsjKZfT942 5dSY9QlTkmp6OVSiWDmGRNo/CFzXLkYzh4QkydeEsDTnQ/7GmDd1txycjLqnHS+KGCelZ4JDQCmU bUurBmjdaQpupMTPjK7++H0aJVkoO64dzHwOn9yo4UIPuyxljun3LwujSs+Awhi+l829slh+ULiV BkXLZZFvE5YGeue7ujJw5bzFPgcip9E+wLGC2FyX8s32s2LrdBuBmGg/W+SSQ3naZK7SnWg0IBLp eiRmGrI5AAN+zgXLxg8nix/RqTTqFW90/hyLNg== )`
	RRSIG=21537 and DNSKEY=21537 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=10338 and DNSKEY=10338 verifies the A RRset
	RRSIG=65355 and DNSKEY=65355 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NGA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: