DNSSEC Analyzer - NNLM.GOV

Domain Name:

Time: 2019-12-12 19:33:16 UTC, NTP stratum 4

Analyzing DNSSEC problems for NNLM.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (864 bytes) ;; HEADER SECTION ;; id = 42321 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to f.root-servers.net for NNLM.GOV/A
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for NNLM.GOV/A: 'IPv6 transport disabled'
	Received 666 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (666 bytes) ;; HEADER SECTION ;; id = 49351 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to j.root-servers.net for GOV/DNSKEY
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (658 bytes) ;; HEADER SECTION ;; id = 31385 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 62911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 48500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191226200254 20191211195754 7698 gov. TSWDNaT2YWZcvYuhy1ISjgdvmxDwfuUJNhhXMnCUD62NHheC81xZR5VuepYRxTyeIeuVBrvwV0gp IOMHMMqsD4IyCZMioFUFrXKlDiuuQTsGkByQFte/wgyW4jC1pNARdNZ54FCn5N2JY3B33MOqfpKy ocq2MULAQjrUhc6TcyiyU5nH9wfBOLTbxYIdP2YWNg1hLjc9knPnQLun7Bg2XLIpqCuypNyLbUWV 6gk/OONTvBZrzGs4sWJ0E+ad7xjkUzuzUSJlhmpyp5uSoOeys8ksYwKwgMVnb3syKMCmZ4nNCAU7 4935yc7k/D/qus++bMwSFdt1/20z1RbGhH7QNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191226200254 20191211195754 7698 gov. TSWDNaT2YWZcvYuhy1ISjgdvmxDwfuUJNhhXMnCUD62NHheC81xZR5VuepYRxTyeIeuVBrvwV0gp IOMHMMqsD4IyCZMioFUFrXKlDiuuQTsGkByQFte/wgyW4jC1pNARdNZ54FCn5N2JY3B33MOqfpKy ocq2MULAQjrUhc6TcyiyU5nH9wfBOLTbxYIdP2YWNg1hLjc9knPnQLun7Bg2XLIpqCuypNyLbUWV 6gk/OONTvBZrzGs4sWJ0E+ad7xjkUzuzUSJlhmpyp5uSoOeys8ksYwKwgMVnb3syKMCmZ4nNCAU7 4935yc7k/D/qus++bMwSFdt1/20z1RbGhH7QNw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=14320 is now in the chain-of-trust
	Query to d.gov-servers.net for NNLM.GOV/A
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for NNLM.GOV/A: 'IPv6 transport disabled'
	Received 583 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (583 bytes) ;; HEADER SECTION ;; id = 7 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NNLM.GOV. 86400 IN NS ns.nih.GOV. NNLM.GOV. 86400 IN NS lhcns2.nlm.nih.GOV. NNLM.GOV. 86400 IN NS ns3.nih.GOV. NNLM.GOV. 86400 IN NS lhcns1.nlm.nih.GOV. NNLM.GOV. 86400 IN NS ns2.nih.GOV. NNLM.GOV. 3600 IN DS ( 54696 7 2 62170ea4eb94cf1a37c88b0b1eed20dcac77f11b863a26c57b211b72600a49ef ) NNLM.GOV. 3600 IN DS 54696 7 1 8bbf8cfcd1a5216763184a548a8b960ad4793e29 NNLM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. CgrC5yyqSei/yia43egPNJPiKsEEUpcKxr9QtF8PZf+1ILA9IN/lBoOFHkDLMbWBUPpjaB4K/U6m Cec+BCIrAHoB5Z7s5/7qVp6Or1KPQitAi9r89VkCpyz3+5I3zvJz2HilF3fAQf6q5jYoBaozw/Fi sOKaXdtoMdBfaRhNe8Sp6dFJ28jeXv0ZBagrvLEgo0edSi0/BFQgYzCpGh4vOw== ) ;; ADDITIONAL SECTION (9 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb lhcns2.nlm.nih.GOV. 86400 IN A 130.14.55.128 ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 lhcns1.nlm.nih.GOV. 86400 IN A 130.14.55.72 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for NNLM.GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for NNLM.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 583 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (583 bytes) ;; HEADER SECTION ;; id = 5124 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NNLM.GOV. 86400 IN NS ns.nih.GOV. NNLM.GOV. 86400 IN NS lhcns2.nlm.nih.GOV. NNLM.GOV. 86400 IN NS ns3.nih.GOV. NNLM.GOV. 86400 IN NS lhcns1.nlm.nih.GOV. NNLM.GOV. 86400 IN NS ns2.nih.GOV. NNLM.GOV. 3600 IN DS ( 54696 7 2 62170ea4eb94cf1a37c88b0b1eed20dcac77f11b863a26c57b211b72600a49ef ) NNLM.GOV. 3600 IN DS 54696 7 1 8bbf8cfcd1a5216763184a548a8b960ad4793e29 NNLM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. CgrC5yyqSei/yia43egPNJPiKsEEUpcKxr9QtF8PZf+1ILA9IN/lBoOFHkDLMbWBUPpjaB4K/U6m Cec+BCIrAHoB5Z7s5/7qVp6Or1KPQitAi9r89VkCpyz3+5I3zvJz2HilF3fAQf6q5jYoBaozw/Fi sOKaXdtoMdBfaRhNe8Sp6dFJ28jeXv0ZBagrvLEgo0edSi0/BFQgYzCpGh4vOw== ) ;; ADDITIONAL SECTION (9 records) ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb lhcns2.nlm.nih.GOV. 86400 IN A 130.14.55.128 ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 lhcns1.nlm.nih.GOV. 86400 IN A 130.14.55.72 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone NNLM.GOV

NNLM.GOV

	Checking DS between GOV and NNLM.GOV
	Query to a.gov-servers.net for NNLM.GOV/DS
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for NNLM.GOV/DS: 'IPv6 transport disabled'
	Received 316 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (316 bytes) ;; HEADER SECTION ;; id = 8986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN DS ;; ANSWER SECTION (3 records) NNLM.GOV. 3600 IN DS ( 54696 7 2 62170ea4eb94cf1a37c88b0b1eed20dcac77f11b863a26c57b211b72600a49ef ) NNLM.GOV. 3600 IN DS 54696 7 1 8bbf8cfcd1a5216763184a548a8b960ad4793e29 NNLM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. CgrC5yyqSei/yia43egPNJPiKsEEUpcKxr9QtF8PZf+1ILA9IN/lBoOFHkDLMbWBUPpjaB4K/U6m Cec+BCIrAHoB5Z7s5/7qVp6Or1KPQitAi9r89VkCpyz3+5I3zvJz2HilF3fAQf6q5jYoBaozw/Fi sOKaXdtoMdBfaRhNe8Sp6dFJ28jeXv0ZBagrvLEgo0edSi0/BFQgYzCpGh4vOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for NNLM.GOV in the GOV zone
	DS=54696/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=54696/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`NNLM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. CgrC5yyqSei/yia43egPNJPiKsEEUpcKxr9QtF8PZf+1ILA9IN/lBoOFHkDLMbWBUPpjaB4K/U6m Cec+BCIrAHoB5Z7s5/7qVp6Or1KPQitAi9r89VkCpyz3+5I3zvJz2HilF3fAQf6q5jYoBaozw/Fi sOKaXdtoMdBfaRhNe8Sp6dFJ28jeXv0ZBagrvLEgo0edSi0/BFQgYzCpGh4vOw== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=54696/SHA-256 is now in the chain-of-trust
	`NNLM.GOV. 3600 IN DS ( 54696 7 2 62170ea4eb94cf1a37c88b0b1eed20dcac77f11b863a26c57b211b72600a49ef )`
	`NNLM.GOV. 3600 IN DS 54696 7 1 8bbf8cfcd1a5216763184a548a8b960ad4793e29`
	Query to lhcns1.nlm.nih.GOV for NNLM.GOV/DNSKEY
	Error querying lhcns1.nlm.nih.GOV/2607:f220:41e:7055:0:0:0:72 for NNLM.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 933 bytes from 130.14.55.72
	;; Answer received from 130.14.55.72 (933 bytes) ;; HEADER SECTION ;; id = 44183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nnlm.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAcSRbOhpjrDjB2EeW4Q093349i9o6rols/rXIzmIJed+sIzPLdS4FnuSqis2p1SmUoImWESv +uP0Aryz96xvQmsjP5EaHVt2qdpA1HxqC1uPb+DP0bxz8RBnxO9fB1SsYw2GNiAv2vCQK48DYgam cEu7uNOxmusnEhltNqnl31xd ) ; Key ID = 59327 nnlm.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAczYSQqmxHFl9XHQ7ahdCOtE9Yoo0yRcKQSQKZtVb5zjA9WO3tlXaYrqEnD1b35auhkfLv27 /a8lxWzDXuw3fDMiKedzTVyL54pjV12IvDnQ7FpjZ2R+qSiipknCBoiytitKmATsA9DPFNTOBYOS ltSHycYl1pyMvxVY3AXQR42p9k/srkYnqwsfxNTlNkDyYTHCU+pIQMFLEx/B5Pi8sfZOmikiNHpD br62QTX++FBKl0ZeSZG9ErbDL8/FOxwRzjFzgmae7olPWrlr1/P9Vt/chEgALCNd29l1xB3jDm65 hB3ABF8AJFB2nTp54iB+NdT9CdPJCf0gJfZj5Oh4Lbk= ) ; Key ID = 54696 nnlm.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191215113014 20191115103014 54696 nnlm.gov. gMb/X3o34dMZiw/boKxtZGNEx4YI4fX/KXVld+kLvbBl6iC7WiMk0NI7uSUJL3J/ejkysIVbVkqL MZ2pijgTbeioQDmU3peo3Oi/LGRbQNicuGHKiBujPjONyd6pJaGSNgoqwrvm2OlLfIQ8335GXX9O LOplOcg5+r7oxMyolPMV5oFDBtAnieZOZIJGy1TdWnJFi2UnrFx2T0Ck8kmRqlUwWGF23FxoHgUQ eoUi7SdCZWjl2yw8bgvKBJ76Fbd7HLDLZPsrhEKRW8+sG9NstRyiAqzyNUrQ1zJAQkhaBpsxonbm McY5r3ZgLCzU/DCv4j1t4JOQnslFuP62s2LYbg== ) nnlm.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191215113014 20191115103014 59327 nnlm.gov. s1nGusp+CPHSo2B/kYNVGbBVpWoHak/eej1Jh4Dc5XvtFuVF34tEPio0Ps9NV1L3+be8LOEfoSbJ Yr3fct9BJUYsQ9ZM6yvKZe7xsPfWR981oNMXB1iYEmMiDa3voqOLwyxrMgcZWNQI5Izo4XasN1Pw EL9GKrJrkVStr6R55Gk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for NNLM.GOV
	`nnlm.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAcSRbOhpjrDjB2EeW4Q093349i9o6rols/rXIzmIJed+sIzPLdS4FnuSqis2p1SmUoImWESv +uP0Aryz96xvQmsjP5EaHVt2qdpA1HxqC1uPb+DP0bxz8RBnxO9fB1SsYw2GNiAv2vCQK48DYgam cEu7uNOxmusnEhltNqnl31xd ) ; Key ID = 59327`
	`nnlm.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAczYSQqmxHFl9XHQ7ahdCOtE9Yoo0yRcKQSQKZtVb5zjA9WO3tlXaYrqEnD1b35auhkfLv27 /a8lxWzDXuw3fDMiKedzTVyL54pjV12IvDnQ7FpjZ2R+qSiipknCBoiytitKmATsA9DPFNTOBYOS ltSHycYl1pyMvxVY3AXQR42p9k/srkYnqwsfxNTlNkDyYTHCU+pIQMFLEx/B5Pi8sfZOmikiNHpD br62QTX++FBKl0ZeSZG9ErbDL8/FOxwRzjFzgmae7olPWrlr1/P9Vt/chEgALCNd29l1xB3jDm65 hB3ABF8AJFB2nTp54iB+NdT9CdPJCf0gJfZj5Oh4Lbk= ) ; Key ID = 54696`
	DNSKEY=54696/SEP is now in the chain-of-trust
	DS=54696/SHA-256 verifies DNSKEY=54696/SEP
	DS=54696/SHA-1 verifies DNSKEY=54696/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`nnlm.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191215113014 20191115103014 54696 nnlm.gov. gMb/X3o34dMZiw/boKxtZGNEx4YI4fX/KXVld+kLvbBl6iC7WiMk0NI7uSUJL3J/ejkysIVbVkqL MZ2pijgTbeioQDmU3peo3Oi/LGRbQNicuGHKiBujPjONyd6pJaGSNgoqwrvm2OlLfIQ8335GXX9O LOplOcg5+r7oxMyolPMV5oFDBtAnieZOZIJGy1TdWnJFi2UnrFx2T0Ck8kmRqlUwWGF23FxoHgUQ eoUi7SdCZWjl2yw8bgvKBJ76Fbd7HLDLZPsrhEKRW8+sG9NstRyiAqzyNUrQ1zJAQkhaBpsxonbm McY5r3ZgLCzU/DCv4j1t4JOQnslFuP62s2LYbg== )`
	`nnlm.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191215113014 20191115103014 59327 nnlm.gov. s1nGusp+CPHSo2B/kYNVGbBVpWoHak/eej1Jh4Dc5XvtFuVF34tEPio0Ps9NV1L3+be8LOEfoSbJ Yr3fct9BJUYsQ9ZM6yvKZe7xsPfWR981oNMXB1iYEmMiDa3voqOLwyxrMgcZWNQI5Izo4XasN1Pw EL9GKrJrkVStr6R55Gk= )`
	RRSIG=54696 and DNSKEY=54696/SEP verifies the DNSKEY RRset
	RRSIG=59327 and DNSKEY=59327 verifies the DNSKEY RRset
	DNSKEY=59327 is now in the chain-of-trust
	Query to ns3.nih.GOV for NNLM.GOV/A
	Error querying ns3.nih.GOV/2607:f220:402:1801:0:0:a570:4e6 for NNLM.GOV/A: 'IPv6 transport disabled'
	Received 229 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (229 bytes) ;; HEADER SECTION ;; id = 4238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN A ;; ANSWER SECTION (2 records) nnlm.gov. 3600 IN A 136.142.89.27 nnlm.gov. 3600 IN RRSIG ( A 7 2 3600 20200109110850 20191210103015 59327 nnlm.gov. vwjCXwyrH7KyQUbzej/CAZ5rTh/jXnysir1vF9YSsnTEGGAVjZzYgtIQKyzrSQ80gOxM5+yImb16 IJAtoyf3x6EatI6w557oOTqCXEZeisbLbn9Ii7UN8fEkuecOOyXRXgY4fyVgVxqM7h27WX/LHFsu u3UFKVBM8Ix4qn+lDBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NNLM.GOV is authoritative for NNLM.GOV
	Found RRSIG signed by nnlm.gov zone
	Query to lhcns1.nlm.nih.GOV for NNLM.GOV/SOA
	Received 3216 bytes from 130.14.55.72
	;; Answer received from 130.14.55.72 (3216 bytes) ;; HEADER SECTION ;; id = 14494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN SOA ;; ANSWER SECTION (2 records) nnlm.gov. 3600 IN SOA ( lhcns1.nlm.nih.gov. nlmdnshostmaster.mail.nih.gov. 592554624 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nnlm.gov. 3600 IN RRSIG ( SOA 7 2 3600 20200109113015 20191210103015 59327 nnlm.gov. QKtX/1hfdKsY5I2EyLwa2Sg+D3JEI4R03KAjSZv+Mzx5t2cwYuQBEHdtvkRJ5PNwdxsnpENbtcVQ dtdfq7BaOhmDsW6gjKuzk71hmfPGyqZeLS5Ha8dxsBBGqHbBPrqVb+TDUaScSugR/0M6kURAQbQ4 SiWF0gJgVrJyjWd6tN4= ) ;; AUTHORITY SECTION (6 records) nnlm.gov. 3600 IN NS ns3.nih.gov. nnlm.gov. 3600 IN NS ns2.nih.gov. nnlm.gov. 3600 IN NS lhcns2.nlm.nih.gov. nnlm.gov. 3600 IN NS ns.nih.gov. nnlm.gov. 3600 IN NS lhcns1.nlm.nih.gov. nnlm.gov. 3600 IN RRSIG ( NS 7 2 3600 20200109103119 20191210103015 59327 nnlm.gov. lxtRy2N5IZw49pNK4bECxcfua9KSlsKw3mQ8OHrlEkLG8Bh+lO1BlpCpvZ9PqWqrYvRJ1fNgMliD glNBrX7x0NAi2Qlev8QORAb6B+o4PWWwxtc4fIFufsl9Cn4y+kYF9s0AuguklCGnG3LGqoOKqmxq wloTBGYEdylyYu4/Sng= ) ;; ADDITIONAL SECTION (21 records) lhcns1.nlm.nih.gov. 3600 IN A 130.14.55.72 lhcns2.nlm.nih.gov. 3600 IN A 130.14.55.128 ns.nih.gov. 3600 IN A 128.231.128.251 ns2.nih.gov. 3600 IN A 128.231.64.1 ns3.nih.gov. 3600 IN A 165.112.4.230 lhcns1.nlm.nih.gov. 3600 IN AAAA 2607:f220:41e:7055::72 lhcns2.nlm.nih.gov. 3600 IN AAAA 2607:f220:41e:7055::128 ns.nih.gov. 3600 IN AAAA 2607:f220:404:101::80e7:80fb ns2.nih.gov. 3600 IN AAAA 2607:f220:418:4101::80e7:401 ns3.nih.gov. 3600 IN AAAA 2607:f220:402:1801::a570:4e6 lhcns1.nlm.nih.gov. 3600 IN RRSIG ( A 7 4 3600 20200109110230 20191210103033 19754 nlm.nih.gov. DMlkqQe9zo5jExjXoAwPH7+DJxKOKPErF+OV8LEInQsBz/TglbwsUexeaPuaAeRosusxdvDANpbV m/wJX+KUKmEVrx3Gi0qf9z+uPPaLV537V0+cAQJE/mRQ4R40cDjWTDKMtxQz+Hv3R2P8ttOrRsvF ARXf0tUg9zJbKjbU4cs= ) lhcns1.nlm.nih.gov. 3600 IN RRSIG ( AAAA 7 4 3600 20200109110358 20191210103033 19754 nlm.nih.gov. JWTItfFeUOQTPAIGNxY+7bXF4bNYBd6VzfttQO7fEInczym94zZH9LedoXqVBxk4AKPbNsH2pe7t pKn3yAxac2zvCgWbMINs5WzLay/zdIk/wyf2maDA75+wMZ712AO1C4Qkr4pnzwpK7U+fgb6SP9XS FqmM52bK8DFKIynszgo= ) lhcns2.nlm.nih.gov. 3600 IN RRSIG ( A 7 4 3600 20200109112555 20191210103027 19754 nlm.nih.gov. jCpXKnbJLLLAAsJdRZNF3g6Y/lFfM7J4rraxqI29yMIiQKqiP7RViYIY1ltJJ77NZcTteTokP/F1 09XXPh0Tv3dN86KmGPQCIHtyst/09K+HTO3zL8L6e4xqyTJhwAHcaAYiBKkeRoH2UDlaMsaWtByr Cza8wNa/98zxyv8mb6A= ) lhcns2.nlm.nih.gov. 3600 IN RRSIG ( AAAA 7 4 3600 20200109110544 20191210103027 19754 nlm.nih.gov. owQdmYHP2r5PFe7KozjVPEwRvAlhliOKTBcPDH3Ji2pFvWTTw0eN0nYzhPHOIv+ULxgm92wL0WYK VRFPg+vf0r6ASE79jwTOkI7p7AYTOqalRjstDpMNml84xM/gMctjyUv+iDYP3hdjl31uofl6gNkp ZjV606TzLmvcrw2XQFQ= ) ns.nih.gov. 3600 IN RRSIG ( A 7 3 3600 20200310201245 20191211201245 42218 nih.gov. Yv8AuFi+xH7l882dIInen+rlHtUQ8aqeYmcJf/VZI7GxSglSB86vsZWfZnzP3xxRwEmykwBvU9Bx hsqxD+FGnyeAaIeYmxKj+osgZGCy39w2FNrkz8w6zllVvCIpyQNbTKKNtsRgRVIXIf/8DZwuL04W ryA4sWKbNhZtDQec55H163wMkjClUHGqBRdUNjDL9iVj18z13JxsyFJxVjnBEfE1P/4gBSh4z/um UUz6AHWK6FamteRU5EEwbNEn0GSO77kXGuRIQf+Tt3SkF1kWec8ZfiKU91g/lqaZWZiWq3I/72YT S5a2jKhOP3R+7YpxYimetJx+2XlH3EEQCsMvwA== ) ns.nih.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20200310201245 20191211201245 42218 nih.gov. T0xnzDPcO2p70eFJPYvwqzHMybXYmcfbUtikP8A2Kcwxyv+69OSICm6W7WVHBcSfUpxf6bjeRR1f MloV0UHjdLrPRgxYtQgrbKJ0IstwIRrfTGGEq9aJYK/DfrHji7X77uaUz+46TG9sHvebOR2/3Kyu v3d6EI0mWbYzwwIYZ1UDgvi6sVotsLv90fEmL7HN7NwgNYmlRRK1RURUI/9a2zrfpblM+k0uNbzz mM+77yZNPDqw1M5ryatwXgHxaOE8rbv0dDbq+olJOAFHxToRP3VX19uXydbX6YuIZLLV2mviVe6p 0hrIpXYpuXviPA0INJ2uc0kuOQ02tnbgv0MYIQ== ) ns2.nih.gov. 3600 IN RRSIG ( A 7 3 3600 20200310201245 20191211201245 42218 nih.gov. GjQ4Ie6yYJTAxflQdqijmjek4AM/SlfxNixqv0otW60B7iG/J6ydJjFbmvwk/nonUaUW/wqzbwBb OeBrei0wMfJBXhRYJ02yoLrgkWjMl2FUW0z9dMQfJTdHy8L3eb9wYUh2ME28px16UjvwGcsM2oKV q9cKLBjGHGfTLjKpCUd6ptrwdeIuj2iz7XJo8ColGiz0MMFx96jjjV0O+wrM3VglBJb2CHPVrVrI 5W08rs0tYP+BiF/xRzu9zIEZTbjtImOFXIeuhYPg8BIDc8v6L7bm5kmJYxxmcmvELL5qz4sMX68P I7o8iCmE0CL2YdbU3qZouS7zT3F5mJYNOBMAQQ== ) ns2.nih.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20200310201245 20191211201245 42218 nih.gov. KRhWfZ+DaL21ufajwQrKYhJW7kpHLKU51E6KKduWMxLNMs1cZFt5ytdkoiAvMtDBkN5i64Z5fzvZ +J/0URiLb0WPXR8m/iVM1tpmpFzkhtwJgYAsxq/DuK22fm+XnA0h8WGYG1Tke9/cR/o7uKDdwRf2 4tBJASUdcrGdocnwd8lBgxypYJ76x8ZPY6dAeu2MFJmaErvuovqoDeeBo4CKBLbpDNVEJZaYqV9n NOdZm8/CUTv9HIQNjmVLezLhSu47EL0bPNAWqp4KQXhX+/ZBGjBlN+8AzkxnvyLCw1UAj8rqRUQK j8U9Mq60MwC/RNwXEgJrdm1Mz3NdbalXp1ABgg== ) ns3.nih.gov. 3600 IN RRSIG ( A 7 3 3600 20200310201245 20191211201245 42218 nih.gov. PDMxsBngGl1uCywDAkLwMmaqd8lmx8T8KWnHVAo11EnPIqFndip/MFl79ZJKosCTERpIwAdWdSb6 tgmNzM88Z1LGnYR3y0/3or3dpfMrYlI52G6En3++uas6AbgRkVALOTxnmujmpmgcfOgQvzcA9dBD ZI5SYcWNAfJsk9ePjFi6X5dDUBpNVpTI1tT20WZYv3hjU6o3M2xI6aO9zsNTEviEz1b6+b6QQvWA Yh3E0WxUxDeKyY3fo36BNNan7h4ZlWnsQwcDS/2UlXs4x5VdD0xTG1BoVINEdEDCSHb3zOoJw221 aqbnvOVEzwiBhWdjIRjr/zvIQ9vhsNs1d4rRiQ== ) ns3.nih.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20200310201245 20191211201245 42218 nih.gov. Mk6zl/I9jKOdxaL+3PwBqilLJEOfZb9OAbE086VOBTRBtYmePFCRaiz8uAs+9E+QKIUJpbcOByEv icOmNRuCLerr8vhfsHgtZxa1xeYaFbm+A3T88oQ+Su+ZQH1S1ezhWaSMaqln9lxoIv29ZFlIU+Vq JV+5Zf+vY9xgsJO0HLsIUG2s2MeP61sO/vvY+GzyF46OZNJiuRd0RZq0gg+Y1Lj1g+uujWz2wFXy VRHJ7vzbvKU7qR4td2QKBU1bq/S6WP9IPT9bRrLJC5ie8KyLHhKaNu7rD30vkPKfFYyHAwCSiarP f3Ih9mjaQCXfeE0keYJHq2hCKm7IcPES7DIaYQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.nih.GOV for NNLM.GOV/SOA
	Error querying ns3.nih.GOV/2607:f220:402:1801:0:0:a570:4e6 for NNLM.GOV/SOA: 'IPv6 transport disabled'
	Received 286 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (286 bytes) ;; HEADER SECTION ;; id = 10495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN SOA ;; ANSWER SECTION (2 records) nnlm.gov. 3600 IN SOA ( lhcns1.nlm.nih.gov. nlmdnshostmaster.mail.nih.gov. 592554624 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nnlm.gov. 3600 IN RRSIG ( SOA 7 2 3600 20200109113015 20191210103015 59327 nnlm.gov. QKtX/1hfdKsY5I2EyLwa2Sg+D3JEI4R03KAjSZv+Mzx5t2cwYuQBEHdtvkRJ5PNwdxsnpENbtcVQ dtdfq7BaOhmDsW6gjKuzk71hmfPGyqZeLS5Ha8dxsBBGqHbBPrqVb+TDUaScSugR/0M6kURAQbQ4 SiWF0gJgVrJyjWd6tN4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.nih.GOV for NNLM.GOV/SOA
	Error querying ns.nih.GOV/2607:f220:404:101:0:0:80e7:80fb for NNLM.GOV/SOA: 'IPv6 transport disabled'
	Received 286 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (286 bytes) ;; HEADER SECTION ;; id = 52279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN SOA ;; ANSWER SECTION (2 records) nnlm.gov. 3600 IN SOA ( lhcns1.nlm.nih.gov. nlmdnshostmaster.mail.nih.gov. 592554624 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nnlm.gov. 3600 IN RRSIG ( SOA 7 2 3600 20200109113015 20191210103015 59327 nnlm.gov. QKtX/1hfdKsY5I2EyLwa2Sg+D3JEI4R03KAjSZv+Mzx5t2cwYuQBEHdtvkRJ5PNwdxsnpENbtcVQ dtdfq7BaOhmDsW6gjKuzk71hmfPGyqZeLS5Ha8dxsBBGqHbBPrqVb+TDUaScSugR/0M6kURAQbQ4 SiWF0gJgVrJyjWd6tN4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to lhcns2.nlm.nih.GOV for NNLM.GOV/SOA
	Received 3216 bytes from 130.14.55.128
	;; Answer received from 130.14.55.128 (3216 bytes) ;; HEADER SECTION ;; id = 21953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN SOA ;; ANSWER SECTION (2 records) nnlm.gov. 3600 IN SOA ( lhcns1.nlm.nih.gov. nlmdnshostmaster.mail.nih.gov. 592554624 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nnlm.gov. 3600 IN RRSIG ( SOA 7 2 3600 20200109113015 20191210103015 59327 nnlm.gov. QKtX/1hfdKsY5I2EyLwa2Sg+D3JEI4R03KAjSZv+Mzx5t2cwYuQBEHdtvkRJ5PNwdxsnpENbtcVQ dtdfq7BaOhmDsW6gjKuzk71hmfPGyqZeLS5Ha8dxsBBGqHbBPrqVb+TDUaScSugR/0M6kURAQbQ4 SiWF0gJgVrJyjWd6tN4= ) ;; AUTHORITY SECTION (6 records) nnlm.gov. 3600 IN NS ns.nih.gov. nnlm.gov. 3600 IN NS lhcns1.nlm.nih.gov. nnlm.gov. 3600 IN NS ns2.nih.gov. nnlm.gov. 3600 IN NS lhcns2.nlm.nih.gov. nnlm.gov. 3600 IN NS ns3.nih.gov. nnlm.gov. 3600 IN RRSIG ( NS 7 2 3600 20200109103119 20191210103015 59327 nnlm.gov. lxtRy2N5IZw49pNK4bECxcfua9KSlsKw3mQ8OHrlEkLG8Bh+lO1BlpCpvZ9PqWqrYvRJ1fNgMliD glNBrX7x0NAi2Qlev8QORAb6B+o4PWWwxtc4fIFufsl9Cn4y+kYF9s0AuguklCGnG3LGqoOKqmxq wloTBGYEdylyYu4/Sng= ) ;; ADDITIONAL SECTION (21 records) lhcns1.nlm.nih.gov. 3600 IN A 130.14.55.72 lhcns2.nlm.nih.gov. 3600 IN A 130.14.55.128 ns.nih.gov. 3600 IN A 128.231.128.251 ns2.nih.gov. 3600 IN A 128.231.64.1 ns3.nih.gov. 3600 IN A 165.112.4.230 lhcns1.nlm.nih.gov. 3600 IN AAAA 2607:f220:41e:7055::72 lhcns2.nlm.nih.gov. 3600 IN AAAA 2607:f220:41e:7055::128 ns.nih.gov. 3600 IN AAAA 2607:f220:404:101::80e7:80fb ns2.nih.gov. 3600 IN AAAA 2607:f220:418:4101::80e7:401 ns3.nih.gov. 3600 IN AAAA 2607:f220:402:1801::a570:4e6 lhcns1.nlm.nih.gov. 3600 IN RRSIG ( A 7 4 3600 20200109110230 20191210103033 19754 nlm.nih.gov. DMlkqQe9zo5jExjXoAwPH7+DJxKOKPErF+OV8LEInQsBz/TglbwsUexeaPuaAeRosusxdvDANpbV m/wJX+KUKmEVrx3Gi0qf9z+uPPaLV537V0+cAQJE/mRQ4R40cDjWTDKMtxQz+Hv3R2P8ttOrRsvF ARXf0tUg9zJbKjbU4cs= ) lhcns1.nlm.nih.gov. 3600 IN RRSIG ( AAAA 7 4 3600 20200109110358 20191210103033 19754 nlm.nih.gov. JWTItfFeUOQTPAIGNxY+7bXF4bNYBd6VzfttQO7fEInczym94zZH9LedoXqVBxk4AKPbNsH2pe7t pKn3yAxac2zvCgWbMINs5WzLay/zdIk/wyf2maDA75+wMZ712AO1C4Qkr4pnzwpK7U+fgb6SP9XS FqmM52bK8DFKIynszgo= ) lhcns2.nlm.nih.gov. 3600 IN RRSIG ( A 7 4 3600 20200109112555 20191210103027 19754 nlm.nih.gov. jCpXKnbJLLLAAsJdRZNF3g6Y/lFfM7J4rraxqI29yMIiQKqiP7RViYIY1ltJJ77NZcTteTokP/F1 09XXPh0Tv3dN86KmGPQCIHtyst/09K+HTO3zL8L6e4xqyTJhwAHcaAYiBKkeRoH2UDlaMsaWtByr Cza8wNa/98zxyv8mb6A= ) lhcns2.nlm.nih.gov. 3600 IN RRSIG ( AAAA 7 4 3600 20200109110544 20191210103027 19754 nlm.nih.gov. owQdmYHP2r5PFe7KozjVPEwRvAlhliOKTBcPDH3Ji2pFvWTTw0eN0nYzhPHOIv+ULxgm92wL0WYK VRFPg+vf0r6ASE79jwTOkI7p7AYTOqalRjstDpMNml84xM/gMctjyUv+iDYP3hdjl31uofl6gNkp ZjV606TzLmvcrw2XQFQ= ) ns.nih.gov. 3600 IN RRSIG ( A 7 3 3600 20200310201245 20191211201245 42218 nih.gov. Yv8AuFi+xH7l882dIInen+rlHtUQ8aqeYmcJf/VZI7GxSglSB86vsZWfZnzP3xxRwEmykwBvU9Bx hsqxD+FGnyeAaIeYmxKj+osgZGCy39w2FNrkz8w6zllVvCIpyQNbTKKNtsRgRVIXIf/8DZwuL04W ryA4sWKbNhZtDQec55H163wMkjClUHGqBRdUNjDL9iVj18z13JxsyFJxVjnBEfE1P/4gBSh4z/um UUz6AHWK6FamteRU5EEwbNEn0GSO77kXGuRIQf+Tt3SkF1kWec8ZfiKU91g/lqaZWZiWq3I/72YT S5a2jKhOP3R+7YpxYimetJx+2XlH3EEQCsMvwA== ) ns.nih.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20200310201245 20191211201245 42218 nih.gov. T0xnzDPcO2p70eFJPYvwqzHMybXYmcfbUtikP8A2Kcwxyv+69OSICm6W7WVHBcSfUpxf6bjeRR1f MloV0UHjdLrPRgxYtQgrbKJ0IstwIRrfTGGEq9aJYK/DfrHji7X77uaUz+46TG9sHvebOR2/3Kyu v3d6EI0mWbYzwwIYZ1UDgvi6sVotsLv90fEmL7HN7NwgNYmlRRK1RURUI/9a2zrfpblM+k0uNbzz mM+77yZNPDqw1M5ryatwXgHxaOE8rbv0dDbq+olJOAFHxToRP3VX19uXydbX6YuIZLLV2mviVe6p 0hrIpXYpuXviPA0INJ2uc0kuOQ02tnbgv0MYIQ== ) ns2.nih.gov. 3600 IN RRSIG ( A 7 3 3600 20200310201245 20191211201245 42218 nih.gov. GjQ4Ie6yYJTAxflQdqijmjek4AM/SlfxNixqv0otW60B7iG/J6ydJjFbmvwk/nonUaUW/wqzbwBb OeBrei0wMfJBXhRYJ02yoLrgkWjMl2FUW0z9dMQfJTdHy8L3eb9wYUh2ME28px16UjvwGcsM2oKV q9cKLBjGHGfTLjKpCUd6ptrwdeIuj2iz7XJo8ColGiz0MMFx96jjjV0O+wrM3VglBJb2CHPVrVrI 5W08rs0tYP+BiF/xRzu9zIEZTbjtImOFXIeuhYPg8BIDc8v6L7bm5kmJYxxmcmvELL5qz4sMX68P I7o8iCmE0CL2YdbU3qZouS7zT3F5mJYNOBMAQQ== ) ns2.nih.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20200310201245 20191211201245 42218 nih.gov. KRhWfZ+DaL21ufajwQrKYhJW7kpHLKU51E6KKduWMxLNMs1cZFt5ytdkoiAvMtDBkN5i64Z5fzvZ +J/0URiLb0WPXR8m/iVM1tpmpFzkhtwJgYAsxq/DuK22fm+XnA0h8WGYG1Tke9/cR/o7uKDdwRf2 4tBJASUdcrGdocnwd8lBgxypYJ76x8ZPY6dAeu2MFJmaErvuovqoDeeBo4CKBLbpDNVEJZaYqV9n NOdZm8/CUTv9HIQNjmVLezLhSu47EL0bPNAWqp4KQXhX+/ZBGjBlN+8AzkxnvyLCw1UAj8rqRUQK j8U9Mq60MwC/RNwXEgJrdm1Mz3NdbalXp1ABgg== ) ns3.nih.gov. 3600 IN RRSIG ( A 7 3 3600 20200310201245 20191211201245 42218 nih.gov. PDMxsBngGl1uCywDAkLwMmaqd8lmx8T8KWnHVAo11EnPIqFndip/MFl79ZJKosCTERpIwAdWdSb6 tgmNzM88Z1LGnYR3y0/3or3dpfMrYlI52G6En3++uas6AbgRkVALOTxnmujmpmgcfOgQvzcA9dBD ZI5SYcWNAfJsk9ePjFi6X5dDUBpNVpTI1tT20WZYv3hjU6o3M2xI6aO9zsNTEviEz1b6+b6QQvWA Yh3E0WxUxDeKyY3fo36BNNan7h4ZlWnsQwcDS/2UlXs4x5VdD0xTG1BoVINEdEDCSHb3zOoJw221 aqbnvOVEzwiBhWdjIRjr/zvIQ9vhsNs1d4rRiQ== ) ns3.nih.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20200310201245 20191211201245 42218 nih.gov. Mk6zl/I9jKOdxaL+3PwBqilLJEOfZb9OAbE086VOBTRBtYmePFCRaiz8uAs+9E+QKIUJpbcOByEv icOmNRuCLerr8vhfsHgtZxa1xeYaFbm+A3T88oQ+Su+ZQH1S1ezhWaSMaqln9lxoIv29ZFlIU+Vq JV+5Zf+vY9xgsJO0HLsIUG2s2MeP61sO/vvY+GzyF46OZNJiuRd0RZq0gg+Y1Lj1g+uujWz2wFXy VRHJ7vzbvKU7qR4td2QKBU1bq/S6WP9IPT9bRrLJC5ie8KyLHhKaNu7rD30vkPKfFYyHAwCSiarP f3Ih9mjaQCXfeE0keYJHq2hCKm7IcPES7DIaYQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nih.GOV for NNLM.GOV/SOA
	Received 286 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (286 bytes) ;; HEADER SECTION ;; id = 27549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN SOA ;; ANSWER SECTION (2 records) nnlm.gov. 3600 IN SOA ( lhcns1.nlm.nih.gov. nlmdnshostmaster.mail.nih.gov. 592554624 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) nnlm.gov. 3600 IN RRSIG ( SOA 7 2 3600 20200109113015 20191210103015 59327 nnlm.gov. QKtX/1hfdKsY5I2EyLwa2Sg+D3JEI4R03KAjSZv+Mzx5t2cwYuQBEHdtvkRJ5PNwdxsnpENbtcVQ dtdfq7BaOhmDsW6gjKuzk71hmfPGyqZeLS5Ha8dxsBBGqHbBPrqVb+TDUaScSugR/0M6kURAQbQ4 SiWF0gJgVrJyjWd6tN4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.nih.GOV for NNLM.GOV/A
	Received 229 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (229 bytes) ;; HEADER SECTION ;; id = 7853 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NNLM.GOV. IN A ;; ANSWER SECTION (2 records) nnlm.gov. 3600 IN A 136.142.89.27 nnlm.gov. 3600 IN RRSIG ( A 7 2 3600 20200109110850 20191210103015 59327 nnlm.gov. vwjCXwyrH7KyQUbzej/CAZ5rTh/jXnysir1vF9YSsnTEGGAVjZzYgtIQKyzrSQ80gOxM5+yImb16 IJAtoyf3x6EatI6w557oOTqCXEZeisbLbn9Ii7UN8fEkuecOOyXRXgY4fyVgVxqM7h27WX/LHFsu u3UFKVBM8Ix4qn+lDBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NNLM.GOV A RR has value 136.142.89.27
	Found 1 RRSIGs over A RRset
	`nnlm.gov. 3600 IN RRSIG ( A 7 2 3600 20200109110850 20191210103015 59327 nnlm.gov. vwjCXwyrH7KyQUbzej/CAZ5rTh/jXnysir1vF9YSsnTEGGAVjZzYgtIQKyzrSQ80gOxM5+yImb16 IJAtoyf3x6EatI6w557oOTqCXEZeisbLbn9Ii7UN8fEkuecOOyXRXgY4fyVgVxqM7h27WX/LHFsu u3UFKVBM8Ix4qn+lDBA= )`
	RRSIG=59327 and DNSKEY=59327 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NNLM.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: