DNSSEC Debugger

Domain Name:

Time: 2026-01-09 02:41:34 UTC

Analyzing DNSSEC problems for NHL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1417 octets ;; HEADER SECTION ;; id = 54735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260122000000 20260101000000 20326 . USkvPpFyQAxqOkImrqqrMdiekwo0VJR5VGDlDxCNsI1dJ79PzX9wXPKprjsMZf77Xbo2SmRTCz+r bNtUtTmiKtDNsRROj9+45I4ExW1w3JKx3SrfHdORnrM0FK14YI+BbOJGkVsSMfJkscC2IWDb0APd vZgkUvYmi1ERmu4UG6CAujAmHe7GbLtEQlzMEdlCrYAgRtJo5RstNivFZ5A9WiBQMlfOAoEf0zr7 FDbHocQa2i983Jc3TzNJcRZwmQRpV1beonuMzQ3BumxE8n0sLX3pd6YFfZeO5J+kY8NVKFrSyEpf i83Yucy2Jd5LJwDo4t2kHHmG03LbkZbeGPkawg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260122000000 20260101000000 20326 . USkvPpFyQAxqOkImrqqrMdiekwo0VJR5VGDlDxCNsI1dJ79PzX9wXPKprjsMZf77Xbo2SmRTCz+r bNtUtTmiKtDNsRROj9+45I4ExW1w3JKx3SrfHdORnrM0FK14YI+BbOJGkVsSMfJkscC2IWDb0APd vZgkUvYmi1ERmu4UG6CAujAmHe7GbLtEQlzMEdlCrYAgRtJo5RstNivFZ5A9WiBQMlfOAoEf0zr7 FDbHocQa2i983Jc3TzNJcRZwmQRpV1beonuMzQ3BumxE8n0sLX3pd6YFfZeO5J+kY8NVKFrSyEpf i83Yucy2Jd5LJwDo4t2kHHmG03LbkZbeGPkawg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	Query to i.root-servers.net for NHL.GOV/A
	Received 620 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 620 octets ;; HEADER SECTION ;; id = 37506 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260121170000 20260108160000 21831 . nmOJEPSQtCN21iiO+Mj8Fz2h8AotgsC/UbweNC7NJuTQVDMXWfBC7UtVg/bPownzvzOc29lVpxDu 7fz+eCVa0hh8AEgbLN9uVtId58iIbBZLxfs6NiQ3O/KJs26YqSmhAePq2925rJCSnUf7NVEV9TYz fUQE6S6+boYHBXcsgKchWh/UD0L2GuT3Rr0y6sJSORe8fD0Q30y54QA92NxhFCOhscre1mKLNAjL XYRNP7qLNgh+hkXHDIFqRWO98YhtLGdlI7fgSS0ddWT/IcuowsZZVckJkm30++mSRJIH6ReB8TyM xj5LmhzrJmplJH89lVE3R3tCYvascir1155B4w== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 610 octets ;; HEADER SECTION ;; id = 11200 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260121170000 20260108160000 21831 . nmOJEPSQtCN21iiO+Mj8Fz2h8AotgsC/UbweNC7NJuTQVDMXWfBC7UtVg/bPownzvzOc29lVpxDu 7fz+eCVa0hh8AEgbLN9uVtId58iIbBZLxfs6NiQ3O/KJs26YqSmhAePq2925rJCSnUf7NVEV9TYz fUQE6S6+boYHBXcsgKchWh/UD0L2GuT3Rr0y6sJSORe8fD0Q30y54QA92NxhFCOhscre1mKLNAjL XYRNP7qLNgh+hkXHDIFqRWO98YhtLGdlI7fgSS0ddWT/IcuowsZZVckJkm30++mSRJIH6ReB8TyM xj5LmhzrJmplJH89lVE3R3tCYvascir1155B4w== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 45616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260121170000 20260108160000 21831 . nmOJEPSQtCN21iiO+Mj8Fz2h8AotgsC/UbweNC7NJuTQVDMXWfBC7UtVg/bPownzvzOc29lVpxDu 7fz+eCVa0hh8AEgbLN9uVtId58iIbBZLxfs6NiQ3O/KJs26YqSmhAePq2925rJCSnUf7NVEV9TYz fUQE6S6+boYHBXcsgKchWh/UD0L2GuT3Rr0y6sJSORe8fD0Q30y54QA92NxhFCOhscre1mKLNAjL XYRNP7qLNgh+hkXHDIFqRWO98YhtLGdlI7fgSS0ddWT/IcuowsZZVckJkm30++mSRJIH6ReB8TyM xj5LmhzrJmplJH89lVE3R3tCYvascir1155B4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260121170000 20260108160000 21831 . nmOJEPSQtCN21iiO+Mj8Fz2h8AotgsC/UbweNC7NJuTQVDMXWfBC7UtVg/bPownzvzOc29lVpxDu 7fz+eCVa0hh8AEgbLN9uVtId58iIbBZLxfs6NiQ3O/KJs26YqSmhAePq2925rJCSnUf7NVEV9TYz fUQE6S6+boYHBXcsgKchWh/UD0L2GuT3Rr0y6sJSORe8fD0Q30y54QA92NxhFCOhscre1mKLNAjL XYRNP7qLNgh+hkXHDIFqRWO98YhtLGdlI7fgSS0ddWT/IcuowsZZVckJkm30++mSRJIH6ReB8TyM xj5LmhzrJmplJH89lVE3R3tCYvascir1155B4w== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 36483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.GOV for NHL.GOV/A
	Received 320 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 320 octets ;; HEADER SECTION ;; id = 10398 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) NHL.GOV. 10800 IN NS hudgate.hud.GOV. NHL.GOV. 10800 IN NS hudgater.hud.GOV. NHL.GOV. 3600 IN DS ( 21348 8 2 5580d7ef7efd8cbff08b88afb18035f197e60dd105ab493c01c2d515c7e6ba3c ) NHL.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260110034135 20260108014135 35496 gov. xROu7xqTe+m/NcZ1fMIEvG4xUXNTfU1p6EcUqkV4raOL4F4kPXOcwM5XJh3/2wtcUqJhmeMAmLSJ rnT7dJnvsA== ) ;; ADDITIONAL SECTION (5 records) hudgate.hud.GOV. 3600 IN A 170.97.67.16 hudgate.hud.GOV. 3600 IN AAAA 2620:0:c91::67:16 hudgater.hud.GOV. 3600 IN A 170.97.167.16 hudgater.hud.GOV. 3600 IN AAAA 2620:0:c92::167:16 ;; { "EDNS-VERSION": 0 }
	Query to b.ns.GOV for NHL.GOV/DNSKEY
	Received 320 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 320 octets ;; HEADER SECTION ;; id = 36924 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) NHL.GOV. 10800 IN NS hudgate.hud.GOV. NHL.GOV. 10800 IN NS hudgater.hud.GOV. NHL.GOV. 3600 IN DS ( 21348 8 2 5580d7ef7efd8cbff08b88afb18035f197e60dd105ab493c01c2d515c7e6ba3c ) NHL.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260110034135 20260108014135 35496 gov. mLr5M8NSGIZNtbhqGWGiJkc29VBRGcie2tV1BulyT8XIOPerMp9KVvRuG29QAHsGABKbD87xeh4s TCrPVynk4A== ) ;; ADDITIONAL SECTION (5 records) hudgate.hud.GOV. 3600 IN A 170.97.67.16 hudgate.hud.GOV. 3600 IN AAAA 2620:0:c91::67:16 hudgater.hud.GOV. 3600 IN A 170.97.167.16 hudgater.hud.GOV. 3600 IN AAAA 2620:0:c92::167:16 ;; { "EDNS-VERSION": 0 }
	Found child zone NHL.GOV

NHL.GOV

	Checking DS between GOV and NHL.GOV
	Query to d.ns.GOV for NHL.GOV/DS
	Received 183 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 183 octets ;; HEADER SECTION ;; id = 10555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN DS ;; ANSWER SECTION (2 records) NHL.GOV. 3600 IN DS ( 21348 8 2 5580d7ef7efd8cbff08b88afb18035f197e60dd105ab493c01c2d515c7e6ba3c ) NHL.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260110034135 20260108014135 35496 gov. RSMXzaN+vpCeXtx74qq/VYewzUawjJ+dYfK13YjFT378J9hoTHRe834moCQjiXn4J3I0r1/CIfpW /6NhOy0z5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for NHL.GOV in the GOV zone
	DS=21348/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NHL.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260110034135 20260108014135 35496 gov. RSMXzaN+vpCeXtx74qq/VYewzUawjJ+dYfK13YjFT378J9hoTHRe834moCQjiXn4J3I0r1/CIfpW /6NhOy0z5g== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=21348/SHA-256 is now in the chain-of-trust
	`NHL.GOV. 3600 IN DS ( 21348 8 2 5580d7ef7efd8cbff08b88afb18035f197e60dd105ab493c01c2d515c7e6ba3c )`
	Query to hudgate.hud.GOV for NHL.GOV/DNSKEY
	Received 1467 bytes from 170.97.67.16
	;; Response received from [170.97.67.16] 1467 octets ;; HEADER SECTION ;; id = 62586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) nhl.gov. 86400 IN DNSKEY ( 257 3 8 BQEAAAABzzfmg798zGpJ8VeMRosV6Jls0Q3r/amU+ouVeSab1kmgqzfa859zIrNWbixUFZo7CwbG hAqn8MfimKcVDKpV24ihF6prdeoV+XjJM9fhutO4Usdrq8/Mm/wcdLSFPTTtCduhIPEsF1whq06Q E1brNek0bVtmRtHcI+LNtRjvtUlmnzjhLRvnOkjRzn8oSQxUF4smlegGZe9RZruiF0GG8J86q6gc Cx+HB1Hd3ZcSmPL0xr8LoUGLrKX6T+VnuRmr1l7YQe8cmBEoavo3Q9G8RkIkZwn65QIe/bLYQLx+ AmLSyK6t1CU3dKVLdJtpVi+QL3ZEt6zrZN/HL3rN/zjQ8Q== ) ; keytag 21348 nhl.gov. 86400 IN DNSKEY ( 256 3 8 BQEAAAAByEM2oECbol+Q8D7VglVBA4lURSZZOdrg/Naj7pAoxAofopC8mCpeIDanJzm71eGbOsin qH07Gft6TEVr2n/cJqHaLotGBsDVFjq3UvWwT4bPPeJCgM+Op3PAKPvhB92/30OFSBcvAev20MZW e848Ix6EknMbDXA3pDGLImvJaQ9rjYiJrwByYH41Ru5kORvCCw/cfKchX+p4ISHPlXqYTuu6TZRx uHbbvR0AchlYGCSqa68J+cyMRkDEwBWVQ24mB8gPNKwljuePIqQlD3wlqsF14k9GFYU3Ao12HXms Z47hFCsrvmdQbjBcX8pAZkj4Bh7ig4AxCFqd+KHvdNHhIQ== ) ; keytag 1530 nhl.gov. 86400 IN DNSKEY ( 256 3 8 BQEAAAABr9PRvuj4ZZ8QDSrD85qsdxjcYQ6n7Ymu3r/oTFbq/VyCYo672Je3l1KRdDsbYfDYYj5w 2p2Z147Rrj/GPJYRqEHPh7Url55oiMpW23zPAyV31NZygLmQXzcdpB7C12MP3w9kvGolDMbTP3Gx cr2aVMPRRtE/T2wnnpCKstqWKBXlUGaaOp6xib43QhAgm/xuZzC0YG+X7Ypcwi4O5YThrdnIf/sn PVtVx83D/wx/hjUl4lWq7/fVjrD+WgcKG1iN20frbp1pff4uIT63v2P2YQs6d/1v9Qnnmn2/TBQk TO/oHsjW71mO85ejz3+r+jFvcavNQX3Om6fzhBF2lB27AQ== ) ; keytag 32853 nhl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260204020033 20260105020033 1530 nhl.gov. bqJQbhe22pHEvTvrDvAULaJnn6ZXcyWme4MAbTWp83jpRgN2U816M2NgLczzQub4nXLD59tHbaPQ 9rhjZH5ajD8wt4ZQ7IwPvdKgnKdG0qoeexiUTiZxeCb/9AujAZA1IfKE8LV2lZ5qC0h1zPo+f3NR hc38G0YLvVjErf1ZCKjzi7Avzw0yqGRZeacUdtl9wkkabfArF53fBlQyVNr5dlUfSdE9yHcVuR/h VjYx00A2Ur8PQ30604fLPu6S1ktz8PAFPqsK9z6lWtDsm/2mf9A6h72SaH21m3SpdCTzSQZDmHfM juQYlhV5+2lqldeY/w8qGBkqbyirwzP0ebPtKQ== ) nhl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260204020033 20260105020033 21348 nhl.gov. KNfMKBg/FqiREi6TLHAUGwQCFB81xMoDdcJfHJ1PHUWdGOzBNMG4J6wxS2yQQMJhLfR00f10zBRb xTExm0mngHHRUNULa2503NtB6BJgR2lc+O+AFuD+wZL4sSqWOaRpbZHcvG8AJXGs2c4kg2SESMuA YuSAwxk1cjCw7RzEazAyLGDFX4LaKXtSZVldy/Mt+n6tjpcSyiOXaKAe/Z7jc6gva8OdfyKlPQ3d e5YVXEp8RsBgDbJMjg0rVpYlXP2FVbrdV807VHKsqDXzM7A03P180rKsOh9mPu5PnJ99GtDqxYs2 G58pPO7fLEIBbpNiRSWmAQ/TdC+8KBoy1Q0krA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for NHL.GOV
	`nhl.gov. 86400 IN DNSKEY ( 257 3 8 BQEAAAABzzfmg798zGpJ8VeMRosV6Jls0Q3r/amU+ouVeSab1kmgqzfa859zIrNWbixUFZo7CwbG hAqn8MfimKcVDKpV24ihF6prdeoV+XjJM9fhutO4Usdrq8/Mm/wcdLSFPTTtCduhIPEsF1whq06Q E1brNek0bVtmRtHcI+LNtRjvtUlmnzjhLRvnOkjRzn8oSQxUF4smlegGZe9RZruiF0GG8J86q6gc Cx+HB1Hd3ZcSmPL0xr8LoUGLrKX6T+VnuRmr1l7YQe8cmBEoavo3Q9G8RkIkZwn65QIe/bLYQLx+ AmLSyK6t1CU3dKVLdJtpVi+QL3ZEt6zrZN/HL3rN/zjQ8Q== ) ; keytag 21348`
	`nhl.gov. 86400 IN DNSKEY ( 256 3 8 BQEAAAAByEM2oECbol+Q8D7VglVBA4lURSZZOdrg/Naj7pAoxAofopC8mCpeIDanJzm71eGbOsin qH07Gft6TEVr2n/cJqHaLotGBsDVFjq3UvWwT4bPPeJCgM+Op3PAKPvhB92/30OFSBcvAev20MZW e848Ix6EknMbDXA3pDGLImvJaQ9rjYiJrwByYH41Ru5kORvCCw/cfKchX+p4ISHPlXqYTuu6TZRx uHbbvR0AchlYGCSqa68J+cyMRkDEwBWVQ24mB8gPNKwljuePIqQlD3wlqsF14k9GFYU3Ao12HXms Z47hFCsrvmdQbjBcX8pAZkj4Bh7ig4AxCFqd+KHvdNHhIQ== ) ; keytag 1530`
	`nhl.gov. 86400 IN DNSKEY ( 256 3 8 BQEAAAABr9PRvuj4ZZ8QDSrD85qsdxjcYQ6n7Ymu3r/oTFbq/VyCYo672Je3l1KRdDsbYfDYYj5w 2p2Z147Rrj/GPJYRqEHPh7Url55oiMpW23zPAyV31NZygLmQXzcdpB7C12MP3w9kvGolDMbTP3Gx cr2aVMPRRtE/T2wnnpCKstqWKBXlUGaaOp6xib43QhAgm/xuZzC0YG+X7Ypcwi4O5YThrdnIf/sn PVtVx83D/wx/hjUl4lWq7/fVjrD+WgcKG1iN20frbp1pff4uIT63v2P2YQs6d/1v9Qnnmn2/TBQk TO/oHsjW71mO85ejz3+r+jFvcavNQX3Om6fzhBF2lB27AQ== ) ; keytag 32853`
	DNSKEY=21348/SEP is now in the chain-of-trust
	DS=21348/SHA-256 verifies DNSKEY=21348/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`nhl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260204020033 20260105020033 1530 nhl.gov. bqJQbhe22pHEvTvrDvAULaJnn6ZXcyWme4MAbTWp83jpRgN2U816M2NgLczzQub4nXLD59tHbaPQ 9rhjZH5ajD8wt4ZQ7IwPvdKgnKdG0qoeexiUTiZxeCb/9AujAZA1IfKE8LV2lZ5qC0h1zPo+f3NR hc38G0YLvVjErf1ZCKjzi7Avzw0yqGRZeacUdtl9wkkabfArF53fBlQyVNr5dlUfSdE9yHcVuR/h VjYx00A2Ur8PQ30604fLPu6S1ktz8PAFPqsK9z6lWtDsm/2mf9A6h72SaH21m3SpdCTzSQZDmHfM juQYlhV5+2lqldeY/w8qGBkqbyirwzP0ebPtKQ== )`
	`nhl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260204020033 20260105020033 21348 nhl.gov. KNfMKBg/FqiREi6TLHAUGwQCFB81xMoDdcJfHJ1PHUWdGOzBNMG4J6wxS2yQQMJhLfR00f10zBRb xTExm0mngHHRUNULa2503NtB6BJgR2lc+O+AFuD+wZL4sSqWOaRpbZHcvG8AJXGs2c4kg2SESMuA YuSAwxk1cjCw7RzEazAyLGDFX4LaKXtSZVldy/Mt+n6tjpcSyiOXaKAe/Z7jc6gva8OdfyKlPQ3d e5YVXEp8RsBgDbJMjg0rVpYlXP2FVbrdV807VHKsqDXzM7A03P180rKsOh9mPu5PnJ99GtDqxYs2 G58pPO7fLEIBbpNiRSWmAQ/TdC+8KBoy1Q0krA== )`
	RRSIG=1530 and DNSKEY=1530 verifies the DNSKEY RRset
	RRSIG=21348 and DNSKEY=21348/SEP verifies the DNSKEY RRset
	DNSKEY=1530 is now in the chain-of-trust
	DNSKEY=32853 is now in the chain-of-trust
	Query to hudgate.hud.GOV for NHL.GOV/A
	Received 354 bytes from 170.97.67.16
	;; Response received from [170.97.67.16] 354 octets ;; HEADER SECTION ;; id = 62434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN A ;; ANSWER SECTION (2 records) nhl.gov. 86400 IN A 170.97.67.189 nhl.gov. 86400 IN RRSIG ( A 8 2 86400 20260204020033 20260105020033 1530 nhl.gov. oMlgMDdEv7LH/BV1T8f5a/D+aEiDfDg/0V8Ly/6NQN2U3tvDx9exvicRmNi8cOTFnQAcuH4fJB8P ZjmwzPpi22Z2/l1X1OKfxIg65w8ebmCQcWbFbuNLlj/GmjHIStS7d1VK9wtpR6XQhJQ3Q9P/SylT lTmRUbST+e1Ym7fJoQVUQhtzbtHw+74/Fyzu68nxaT3x5dpNuhQm1Ddv0ix9Jd5yMFkUbyhvrfmd 3nlzI3ZQuajCsGdDIqDBKWiQKR62Q1EOw1p7iYj6p74wV++FtHW3aO+iNu1r6sXuectvAsC/FFxp 1wYQ3/II9M2pu3Luf4K727YlvPIQoZC+e9BMTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	hudgate.hud.GOV is authoritative for NHL.GOV
	Found RRSIG signed by nhl.gov zone
	Query to hudgater.hud.GOV for NHL.GOV/SOA
	Received 383 bytes from 170.97.167.16
	;; Response received from [170.97.167.16] 383 octets ;; HEADER SECTION ;; id = 42660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN SOA ;; ANSWER SECTION (2 records) nhl.gov. 86400 IN SOA ( www.nhl.gov. root.www.nhl.gov. 2026010501 ;serial 14400 ;refresh 1800 ;retry 2600000 ;expire 86400 ;minimum ) nhl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260204020033 20260105020033 1530 nhl.gov. u74c8sao0KYl3yXLPg8DPnMSHW4JbmZ8Q9hPorFKTZ9weymvlFTaTdxiYRWz/i/g/7zWLXkMnI0V xiV1Yr27X9llMEqBytNdONYLaVZ7rvJEgENwzk8u4pwIpRRn4xR3WUOeTOaIBgKiEPooTAxGq+E/ IJsZH4aDwQqqhdaVWf9sBWnI00IWEG8TaHyWBzpGIuI4bYZu6qgN5iQY6JoESHNooER8qll20man qZ30jIH9JMx6NQc7ebhg5cVGW30Wr0arBn8oM8r99Hg+W1rmxASwrnbhDH7RgpiG+YsisLF+qo7l X8fv82rSF7G4kZD4LgcJTJXsVCqY8UAIhpW+1A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to hudgate.hud.GOV for NHL.GOV/A
	Received 354 bytes from 170.97.67.16
	;; Response received from [170.97.67.16] 354 octets ;; HEADER SECTION ;; id = 48896 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN A ;; ANSWER SECTION (2 records) nhl.gov. 86400 IN A 170.97.67.189 nhl.gov. 86400 IN RRSIG ( A 8 2 86400 20260204020033 20260105020033 1530 nhl.gov. oMlgMDdEv7LH/BV1T8f5a/D+aEiDfDg/0V8Ly/6NQN2U3tvDx9exvicRmNi8cOTFnQAcuH4fJB8P ZjmwzPpi22Z2/l1X1OKfxIg65w8ebmCQcWbFbuNLlj/GmjHIStS7d1VK9wtpR6XQhJQ3Q9P/SylT lTmRUbST+e1Ym7fJoQVUQhtzbtHw+74/Fyzu68nxaT3x5dpNuhQm1Ddv0ix9Jd5yMFkUbyhvrfmd 3nlzI3ZQuajCsGdDIqDBKWiQKR62Q1EOw1p7iYj6p74wV++FtHW3aO+iNu1r6sXuectvAsC/FFxp 1wYQ3/II9M2pu3Luf4K727YlvPIQoZC+e9BMTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NHL.GOV A RR has value 170.97.67.189
	Found 1 RRSIGs over A RRset
	`nhl.gov. 86400 IN RRSIG ( A 8 2 86400 20260204020033 20260105020033 1530 nhl.gov. oMlgMDdEv7LH/BV1T8f5a/D+aEiDfDg/0V8Ly/6NQN2U3tvDx9exvicRmNi8cOTFnQAcuH4fJB8P ZjmwzPpi22Z2/l1X1OKfxIg65w8ebmCQcWbFbuNLlj/GmjHIStS7d1VK9wtpR6XQhJQ3Q9P/SylT lTmRUbST+e1Ym7fJoQVUQhtzbtHw+74/Fyzu68nxaT3x5dpNuhQm1Ddv0ix9Jd5yMFkUbyhvrfmd 3nlzI3ZQuajCsGdDIqDBKWiQKR62Q1EOw1p7iYj6p74wV++FtHW3aO+iNu1r6sXuectvAsC/FFxp 1wYQ3/II9M2pu3Luf4K727YlvPIQoZC+e9BMTg== )`
	RRSIG=1530 and DNSKEY=1530 verifies the A RRset

NHL.GOV

	Query to hudgater.hud.GOV for NHL.GOV/A
	Received 354 bytes from 170.97.167.16
	;; Response received from [170.97.167.16] 354 octets ;; HEADER SECTION ;; id = 56351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN A ;; ANSWER SECTION (2 records) nhl.gov. 86400 IN A 170.97.67.189 nhl.gov. 86400 IN RRSIG ( A 8 2 86400 20260204020033 20260105020033 1530 nhl.gov. oMlgMDdEv7LH/BV1T8f5a/D+aEiDfDg/0V8Ly/6NQN2U3tvDx9exvicRmNi8cOTFnQAcuH4fJB8P ZjmwzPpi22Z2/l1X1OKfxIg65w8ebmCQcWbFbuNLlj/GmjHIStS7d1VK9wtpR6XQhJQ3Q9P/SylT lTmRUbST+e1Ym7fJoQVUQhtzbtHw+74/Fyzu68nxaT3x5dpNuhQm1Ddv0ix9Jd5yMFkUbyhvrfmd 3nlzI3ZQuajCsGdDIqDBKWiQKR62Q1EOw1p7iYj6p74wV++FtHW3aO+iNu1r6sXuectvAsC/FFxp 1wYQ3/II9M2pu3Luf4K727YlvPIQoZC+e9BMTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	hudgater.hud.GOV is authoritative for NHL.GOV
	Found RRSIG signed by nhl.gov zone
	Query to hudgater.hud.GOV for NHL.GOV/A
	Received 354 bytes from 170.97.167.16
	;; Response received from [170.97.167.16] 354 octets ;; HEADER SECTION ;; id = 50545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NHL.GOV. IN A ;; ANSWER SECTION (2 records) nhl.gov. 86400 IN A 170.97.67.189 nhl.gov. 86400 IN RRSIG ( A 8 2 86400 20260204020033 20260105020033 1530 nhl.gov. oMlgMDdEv7LH/BV1T8f5a/D+aEiDfDg/0V8Ly/6NQN2U3tvDx9exvicRmNi8cOTFnQAcuH4fJB8P ZjmwzPpi22Z2/l1X1OKfxIg65w8ebmCQcWbFbuNLlj/GmjHIStS7d1VK9wtpR6XQhJQ3Q9P/SylT lTmRUbST+e1Ym7fJoQVUQhtzbtHw+74/Fyzu68nxaT3x5dpNuhQm1Ddv0ix9Jd5yMFkUbyhvrfmd 3nlzI3ZQuajCsGdDIqDBKWiQKR62Q1EOw1p7iYj6p74wV++FtHW3aO+iNu1r6sXuectvAsC/FFxp 1wYQ3/II9M2pu3Luf4K727YlvPIQoZC+e9BMTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NHL.GOV A RR has value 170.97.67.189
	Found 1 RRSIGs over A RRset
	`nhl.gov. 86400 IN RRSIG ( A 8 2 86400 20260204020033 20260105020033 1530 nhl.gov. oMlgMDdEv7LH/BV1T8f5a/D+aEiDfDg/0V8Ly/6NQN2U3tvDx9exvicRmNi8cOTFnQAcuH4fJB8P ZjmwzPpi22Z2/l1X1OKfxIg65w8ebmCQcWbFbuNLlj/GmjHIStS7d1VK9wtpR6XQhJQ3Q9P/SylT lTmRUbST+e1Ym7fJoQVUQhtzbtHw+74/Fyzu68nxaT3x5dpNuhQm1Ddv0ix9Jd5yMFkUbyhvrfmd 3nlzI3ZQuajCsGdDIqDBKWiQKR62Q1EOw1p7iYj6p74wV++FtHW3aO+iNu1r6sXuectvAsC/FFxp 1wYQ3/II9M2pu3Luf4K727YlvPIQoZC+e9BMTg== )`
	RRSIG=1530 and DNSKEY=1530 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NHL.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: