DNSSEC Analyzer - PCAST.GOV

Domain Name:

Time: 2022-05-17 10:05:30 UTC, NTP stratum 16

Analyzing DNSSEC problems for PCAST.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 52751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=47671 is now in the chain-of-trust
	Query to g.root-servers.net for PCAST.GOV/A
	Received 631 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (631 octets) ;; HEADER SECTION ;; id = 35716 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220530050000 20220517040000 47671 . V/pZBFyWGKD3Ismj9gJ8Yf7K5tg3eFxnGm5c9FPmk84UKfMEfHIfDr2LZp5S4gq0ZG1AXwQNEHvr YBAD3B0g/EARpwmCkPCRpVcZXjPQXlCXTBSRl6No7Stz2hiCUUXhTzw9AW2a7TS7pnNs7N0RPFKX WvBvh+CUrYtl11mTLh3axVOI4+7z9JaxkJwiyLO4+vHcTeDwBpZRkwYdQrTsifGu03EZSCg+0ElR l4N+Z+R+MkDbWMnFsoio4349ZnFQ+kzL9077Tniskm4tCjwBsE6rsumrBskRzeFNEAfjkvOnC2xZ wMAAHGxM/ZfUr6fLUwxib+3iVK8S4vfbyh+55Q== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (622 octets) ;; HEADER SECTION ;; id = 49384 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220530050000 20220517040000 47671 . V/pZBFyWGKD3Ismj9gJ8Yf7K5tg3eFxnGm5c9FPmk84UKfMEfHIfDr2LZp5S4gq0ZG1AXwQNEHvr YBAD3B0g/EARpwmCkPCRpVcZXjPQXlCXTBSRl6No7Stz2hiCUUXhTzw9AW2a7TS7pnNs7N0RPFKX WvBvh+CUrYtl11mTLh3axVOI4+7z9JaxkJwiyLO4+vHcTeDwBpZRkwYdQrTsifGu03EZSCg+0ElR l4N+Z+R+MkDbWMnFsoio4349ZnFQ+kzL9077Tniskm4tCjwBsE6rsumrBskRzeFNEAfjkvOnC2xZ wMAAHGxM/ZfUr6fLUwxib+3iVK8S4vfbyh+55Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (367 octets) ;; HEADER SECTION ;; id = 57980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220530050000 20220517040000 47671 . V/pZBFyWGKD3Ismj9gJ8Yf7K5tg3eFxnGm5c9FPmk84UKfMEfHIfDr2LZp5S4gq0ZG1AXwQNEHvr YBAD3B0g/EARpwmCkPCRpVcZXjPQXlCXTBSRl6No7Stz2hiCUUXhTzw9AW2a7TS7pnNs7N0RPFKX WvBvh+CUrYtl11mTLh3axVOI4+7z9JaxkJwiyLO4+vHcTeDwBpZRkwYdQrTsifGu03EZSCg+0ElR l4N+Z+R+MkDbWMnFsoio4349ZnFQ+kzL9077Tniskm4tCjwBsE6rsumrBskRzeFNEAfjkvOnC2xZ wMAAHGxM/ZfUr6fLUwxib+3iVK8S4vfbyh+55Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20220530050000 20220517040000 47671 . V/pZBFyWGKD3Ismj9gJ8Yf7K5tg3eFxnGm5c9FPmk84UKfMEfHIfDr2LZp5S4gq0ZG1AXwQNEHvr YBAD3B0g/EARpwmCkPCRpVcZXjPQXlCXTBSRl6No7Stz2hiCUUXhTzw9AW2a7TS7pnNs7N0RPFKX WvBvh+CUrYtl11mTLh3axVOI4+7z9JaxkJwiyLO4+vHcTeDwBpZRkwYdQrTsifGu03EZSCg+0ElR l4N+Z+R+MkDbWMnFsoio4349ZnFQ+kzL9077Tniskm4tCjwBsE6rsumrBskRzeFNEAfjkvOnC2xZ wMAAHGxM/ZfUr6fLUwxib+3iVK8S4vfbyh+55Q== )`
	RRSIG=47671 and DNSKEY=47671 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (777 octets) ;; HEADER SECTION ;; id = 60020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcMiSRWS8eP1lhmsxCp/xRqF4ywBpC8OZ8SlW3boQwaSUol5jFtTpTTM8uKNyNrI/6Vc1crn QWCCPAv+mZGHzMgDkpD3JpW4UhVvI8AkNvoT/LTxCmhC6nZUOTv7Njg+yBVLm4bMw9EaH18N+HVl uhHX1ZOjhnY7uBf1DC32L4ibJvgjiREljTH622fsAXwf9hTE2UdQ/P3SDNrooKswmWE= ) ; Key ID = 2706 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220524190254 20220509185754 7698 gov. qfiWJKXVV4H1aMozgr+uPpZgWSeNiDenfJHt0NBVsSkk/BSGzAYA2hZqS+J0s7B58PWfyfJ71QEO rIx+iFWy3Gkw3X64q0lgePvxBHnIU2Fd7f24xJ0s+tsTix/RL2mgswbly0GK5tISa7z3T99ZqDic 8lLK509uQi4PFhqPJF8ItJRHUZ7ig5Ca1cBkDib2g0HeEBU8YQYvAYfNidRJRlgyEYmVqF7GMl+s NFVeEXgej9MkOdtbkqvcmF2aXdOINeM3T+y7TNXx3NwXjmiKmEgCqsPOh+6zwzrA9WSomYZq8O77 dzgk9V3tQ60c0R2N5Al+ZemQCmmmlgQ6EHqFSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcMiSRWS8eP1lhmsxCp/xRqF4ywBpC8OZ8SlW3boQwaSUol5jFtTpTTM8uKNyNrI/6Vc1crn QWCCPAv+mZGHzMgDkpD3JpW4UhVvI8AkNvoT/LTxCmhC6nZUOTv7Njg+yBVLm4bMw9EaH18N+HVl uhHX1ZOjhnY7uBf1DC32L4ibJvgjiREljTH622fsAXwf9hTE2UdQ/P3SDNrooKswmWE= ) ; Key ID = 2706`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220524190254 20220509185754 7698 gov. qfiWJKXVV4H1aMozgr+uPpZgWSeNiDenfJHt0NBVsSkk/BSGzAYA2hZqS+J0s7B58PWfyfJ71QEO rIx+iFWy3Gkw3X64q0lgePvxBHnIU2Fd7f24xJ0s+tsTix/RL2mgswbly0GK5tISa7z3T99ZqDic 8lLK509uQi4PFhqPJF8ItJRHUZ7ig5Ca1cBkDib2g0HeEBU8YQYvAYfNidRJRlgyEYmVqF7GMl+s NFVeEXgej9MkOdtbkqvcmF2aXdOINeM3T+y7TNXx3NwXjmiKmEgCqsPOh+6zwzrA9WSomYZq8O77 dzgk9V3tQ60c0R2N5Al+ZemQCmmmlgQ6EHqFSw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=2706 is now in the chain-of-trust
	Query to c.gov-servers.net for PCAST.GOV/A
	Received 416 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (416 octets) ;; HEADER SECTION ;; id = 15908 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) PCAST.GOV. 86400 IN NS fulcrum.doe.GOV. PCAST.GOV. 86400 IN NS foxbat.doe.GOV. PCAST.GOV. 3600 IN DS ( 62839 8 2 255bcff4883eeae160813734b9fbe59f4a0dbd933aa734cabd286ca4defe00fe ) PCAST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220523134208 20220516134208 2706 gov. hR9aJ1UzkQo1NAaXPlUgPP8SerHGfzWbZEt/M1JQnxBv+ciTcdryR2o6TOPrDm5anCIkXZR5NbRz kl3aSnYponmm4KZuCM4hcQXtUaMuosOMJJeCaynpshVnV71QkHod1p0E0C4d27YpVccva+Kw3kB7 hV8nGySd3WSOzeKsWniAQd/9tQX2IjWkfGEdDppAl6BjBL9HHNl5xA6IWnacBg== ) ;; ADDITIONAL SECTION (5 records) foxbat.doe.GOV. 86400 IN A 205.254.143.110 fulcrum.doe.GOV. 86400 IN A 205.254.144.110 foxbat.doe.GOV. 86400 IN AAAA 2607:f368:1000:1000::53 fulcrum.doe.GOV. 86400 IN AAAA 2607:f368:1000:1100::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for PCAST.GOV/DNSKEY
	Received 416 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (416 octets) ;; HEADER SECTION ;; id = 43494 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) PCAST.GOV. 86400 IN NS fulcrum.doe.GOV. PCAST.GOV. 86400 IN NS foxbat.doe.GOV. PCAST.GOV. 3600 IN DS ( 62839 8 2 255bcff4883eeae160813734b9fbe59f4a0dbd933aa734cabd286ca4defe00fe ) PCAST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220523134208 20220516134208 2706 gov. hR9aJ1UzkQo1NAaXPlUgPP8SerHGfzWbZEt/M1JQnxBv+ciTcdryR2o6TOPrDm5anCIkXZR5NbRz kl3aSnYponmm4KZuCM4hcQXtUaMuosOMJJeCaynpshVnV71QkHod1p0E0C4d27YpVccva+Kw3kB7 hV8nGySd3WSOzeKsWniAQd/9tQX2IjWkfGEdDppAl6BjBL9HHNl5xA6IWnacBg== ) ;; ADDITIONAL SECTION (5 records) foxbat.doe.GOV. 86400 IN A 205.254.143.110 fulcrum.doe.GOV. 86400 IN A 205.254.144.110 foxbat.doe.GOV. 86400 IN AAAA 2607:f368:1000:1000::53 fulcrum.doe.GOV. 86400 IN AAAA 2607:f368:1000:1100::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone PCAST.GOV

PCAST.GOV

	Checking DS between GOV and PCAST.GOV
	Query to c.gov-servers.net for PCAST.GOV/DS
	Received 281 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (281 octets) ;; HEADER SECTION ;; id = 52538 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN DS ;; ANSWER SECTION (2 records) PCAST.GOV. 3600 IN DS ( 62839 8 2 255bcff4883eeae160813734b9fbe59f4a0dbd933aa734cabd286ca4defe00fe ) PCAST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220523134208 20220516134208 2706 gov. hR9aJ1UzkQo1NAaXPlUgPP8SerHGfzWbZEt/M1JQnxBv+ciTcdryR2o6TOPrDm5anCIkXZR5NbRz kl3aSnYponmm4KZuCM4hcQXtUaMuosOMJJeCaynpshVnV71QkHod1p0E0C4d27YpVccva+Kw3kB7 hV8nGySd3WSOzeKsWniAQd/9tQX2IjWkfGEdDppAl6BjBL9HHNl5xA6IWnacBg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for PCAST.GOV in the GOV zone
	DS=62839/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PCAST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220523134208 20220516134208 2706 gov. hR9aJ1UzkQo1NAaXPlUgPP8SerHGfzWbZEt/M1JQnxBv+ciTcdryR2o6TOPrDm5anCIkXZR5NbRz kl3aSnYponmm4KZuCM4hcQXtUaMuosOMJJeCaynpshVnV71QkHod1p0E0C4d27YpVccva+Kw3kB7 hV8nGySd3WSOzeKsWniAQd/9tQX2IjWkfGEdDppAl6BjBL9HHNl5xA6IWnacBg== )`
	RRSIG=2706 and DNSKEY=2706 verifies the DS RRset
	DS=62839/SHA-256 is now in the chain-of-trust
	`PCAST.GOV. 3600 IN DS ( 62839 8 2 255bcff4883eeae160813734b9fbe59f4a0dbd933aa734cabd286ca4defe00fe )`
	Query to fulcrum.doe.GOV for PCAST.GOV/DNSKEY
	Received 1981 bytes from 205.254.144.110
	;; Response received from 205.254.144.110 (1981 octets) ;; HEADER SECTION ;; id = 43514 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) pcast.gov. 300 IN DNSKEY ( 256 3 8 AwEAAd2kLlAABJZfw/xgZCX33W2WesySvSUVt+olUbare/bl2Qw3P1qohUOWU99y7ULUK6d9DhJM t0vpIN+LCZuHdmh0EaTn0vgWkbB1F3QOv56RY86Y+IOWwT0xgO9NqXvyBwphas4NXGzwTJFJMISQ qZwDzvZGP/6GXL126g+heKMoPf3le6LJIiBuwCMQMAeH1a7OYSttQ2HQkco6lCU63KCmtHKQ3MNe wikhJptjla/lOciYrhWLlw6nvuiy2P5xphUsBNIn4HD6jhy7udVFP/L1MYtgLXhaIt7W1fUUWCmK pAdZ4+kAR/1YXFY0nzEeYiizCMByToyWLgwOel8lLOs= ) ; Key ID = 32949 pcast.gov. 300 IN DNSKEY ( 257 3 8 AwEAAceysPV7QhX8GSaCqtwpS4rphb1ldA9Q96xCRpYV+PY0ksr00J7Rn3Ghq29KmczoUygGQ3tc lwpvislAliVGGza8j7WEbnyfhKi0iz03Wybsuor6wlSmVfYPVMQvQxv4xnOEdDWL+3sFlUex6Yue HOS1tT4mSKXd+ix5JKH3DxFeOa+EpHinz3jpxwvO90T5ZedcawunecnAMO0cs0L8ADK+53u8RP0A HOpHtnjk/fFC0+DufCTWDZuSFCtUJx24kys5spOYHCFxfAz4odXTT8jasZF7GZBu+b64PjPvmf/v JIfODpYaLR4uh/GeuPLDIbzYV49H96fVhB0cAHgcUCRmgQpyNV2VKHu3/gUgfvd//w51QZDn7F4b CSDlSQ4txa58KY1KZQBLgWLtnFqmUy2NnEriJp4UhLPwwR1TiXtp9Hs/zcEjHd1EAU+c7paTxNSQ aRNpvSx4fW8fT4Ev98sGEzgJPP6LBq6q3hIsiywWruSS2tORD3hDzB1ldYxuOMe8yNAg6bLNjM6a k2d+ah/hZZmfD1JWUMXP46D9aRak6wrJrLVxQo6K1SQzP8uWHLNAOp19uhv4kvqu/jAlWkuO631n 4scSGkOvIBWbtjLj3P2qccaSlThB/l9cM9ekqiFcXUGmN7MD0sm3Ygdm1nYM7JshPS4xhzI5bp7M Xcj5 ) ; Key ID = 62839 pcast.gov. 300 IN DNSKEY ( 256 3 8 AwEAAaolJurFg7/kJmOhQLQ928UdBFLX5jKbKhcfCYrvcahjigcFhsEOMPRvipe0uDc+aNKRLUDn lRyJkxQmsXKnZa+p57Wwl9Y0tWZuqRrb0Vj5x2VB/h55DbN8lwlONSlQlQAY+VDvCeR7klBIJ7iz uxl4WzY6dYb85EHDKJuGMTslwDfcpu4gL+59d3+rDN7dWjJyz1l87bCrSY9qD+uMg+65vQ7k7HdO /RZM68irkYkvaLRdm11gF7gORn3GU+eMlWQxiMjL7qwfuICZMnHVAECetQpudme0ychxmzjDMHq/ x0oLY1KiRf8I8y/QYsXU9Xj3rdy3L6RwF2vQepryMs8= ) ; Key ID = 6216 pcast.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20220618011654 20220320001654 6216 pcast.gov. CmvlqtIk2BvumRaXGL4YaO7KT7wNpQnWeGXGIivypN+tQgbWIFxXLY1pZdjOnA2egrAWW5UzNrW+ lAiwm1ARKtlc6tLytaXkAqKaKqt7GKlJmEdReZtrQQqXNw1XZTTXOXgb2WRgYEC7mBEo9xghtFY7 P2PZBgBw1xU4OIftl5P+3U5p1eIlQMmScWu0whJBqM001aO280GhRZ4wuZVZMU1KPYBoOfCoiz+a hFO1iMHF8lzQ9CR5uND886C4jpe490D9ke150x4EKhD5UveY5q3nYTaD5Gv8Z7loTy6CMy83H3d9 hQFgu2xReKPVoNI3r6SfGQAelYXTk/ti9BbgyQ== ) pcast.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20220618011654 20220320001654 62839 pcast.gov. H2TQlEuhzIcfxpBYmYwbW8qkYTbBDaMMUCGWS3EjYfF0eVsC7sFX/WIBkwCqiHKbp5gPTGagODua zjvi4+YmFcMC028BS/JTvc5Ggri6e5CzXTv1UyLjq3TUJ9Dmgw9TBKXgkQvqXzEUsPwO9i/iAbWB 1fovxmnLvIarNscOL68DLFBpK+on6qVW+7NAZ8y3yuvkipMZU7Gi7jmsRE4t5CiapIia8rwAOph6 sb/JGNGbO+s69WcLq2WIzFDnXe1wnSyEQHjrwIWm9EUMg9X1Xs5SbdFzFFnmE6HVCkJI2xZNKb4e JDJYomHp62EKAYvXlqHvw8WuWlYbEt6IXJ//6vB77yNvR1YQx6p+zk90DL1he+eQiAkpgsuof3BW eXfHryqnFGMp2YBdqtEGqFGHxwG5vOD9mwl8NKjWpkKevRxJHjU6P0l8eLG3FbEDhuIhnLzTnUqs 5YFusNeOPd0+XTwc05auFqvkyNMjsNJwAv7CbzIbV4Q3VCxzXuD853Wzm5se9SuBok/gDJbSYKUL WKBAZ2ZQECCOzF+nHtc+wTzzmNIGge4okQ2LV4+oDvBvK6ZCJWIYyXLR04wyqkdPfd0xl4wMXr14 soH032til7bz4yRrwknwewhTDFXZ/xG+cL6NzBRHiTpdW0rTPdKDLL69z3IY2RH1HgqDG8ntF/s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for PCAST.GOV
	`pcast.gov. 300 IN DNSKEY ( 256 3 8 AwEAAd2kLlAABJZfw/xgZCX33W2WesySvSUVt+olUbare/bl2Qw3P1qohUOWU99y7ULUK6d9DhJM t0vpIN+LCZuHdmh0EaTn0vgWkbB1F3QOv56RY86Y+IOWwT0xgO9NqXvyBwphas4NXGzwTJFJMISQ qZwDzvZGP/6GXL126g+heKMoPf3le6LJIiBuwCMQMAeH1a7OYSttQ2HQkco6lCU63KCmtHKQ3MNe wikhJptjla/lOciYrhWLlw6nvuiy2P5xphUsBNIn4HD6jhy7udVFP/L1MYtgLXhaIt7W1fUUWCmK pAdZ4+kAR/1YXFY0nzEeYiizCMByToyWLgwOel8lLOs= ) ; Key ID = 32949`
	pcast.gov. 300 IN DNSKEY ( 257 3 8 AwEAAceysPV7QhX8GSaCqtwpS4rphb1ldA9Q96xCRpYV+PY0ksr00J7Rn3Ghq29KmczoUygGQ3tc lwpvislAliVGGza8j7WEbnyfhKi0iz03Wybsuor6wlSmVfYPVMQvQxv4xnOEdDWL+3sFlUex6Yue HOS1tT4mSKXd+ix5JKH3DxFeOa+EpHinz3jpxwvO90T5ZedcawunecnAMO0cs0L8ADK+53u8RP0A HOpHtnjk/fFC0+DufCTWDZuSFCtUJx24kys5spOYHCFxfAz4odXTT8jasZF7GZBu+b64PjPvmf/v JIfODpYaLR4uh/GeuPLDIbzYV49H96fVhB0cAHgcUCRmgQpyNV2VKHu3/gUgfvd//w51QZDn7F4b CSDlSQ4txa58KY1KZQBLgWLtnFqmUy2NnEriJp4UhLPwwR1TiXtp9Hs/zcEjHd1EAU+c7paTxNSQ aRNpvSx4fW8fT4Ev98sGEzgJPP6LBq6q3hIsiywWruSS2tORD3hDzB1ldYxuOMe8yNAg6bLNjM6a k2d+ah/hZZmfD1JWUMXP46D9aRak6wrJrLVxQo6K1SQzP8uWHLNAOp19uhv4kvqu/jAlWkuO631n 4scSGkOvIBWbtjLj3P2qccaSlThB/l9cM9ekqiFcXUGmN7MD0sm3Ygdm1nYM7JshPS4xhzI5bp7M Xcj5 ) ; Key ID = 62839
	`pcast.gov. 300 IN DNSKEY ( 256 3 8 AwEAAaolJurFg7/kJmOhQLQ928UdBFLX5jKbKhcfCYrvcahjigcFhsEOMPRvipe0uDc+aNKRLUDn lRyJkxQmsXKnZa+p57Wwl9Y0tWZuqRrb0Vj5x2VB/h55DbN8lwlONSlQlQAY+VDvCeR7klBIJ7iz uxl4WzY6dYb85EHDKJuGMTslwDfcpu4gL+59d3+rDN7dWjJyz1l87bCrSY9qD+uMg+65vQ7k7HdO /RZM68irkYkvaLRdm11gF7gORn3GU+eMlWQxiMjL7qwfuICZMnHVAECetQpudme0ychxmzjDMHq/ x0oLY1KiRf8I8y/QYsXU9Xj3rdy3L6RwF2vQepryMs8= ) ; Key ID = 6216`
	DNSKEY=62839/SEP is now in the chain-of-trust
	DS=62839/SHA-256 verifies DNSKEY=62839/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`pcast.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20220618011654 20220320001654 6216 pcast.gov. CmvlqtIk2BvumRaXGL4YaO7KT7wNpQnWeGXGIivypN+tQgbWIFxXLY1pZdjOnA2egrAWW5UzNrW+ lAiwm1ARKtlc6tLytaXkAqKaKqt7GKlJmEdReZtrQQqXNw1XZTTXOXgb2WRgYEC7mBEo9xghtFY7 P2PZBgBw1xU4OIftl5P+3U5p1eIlQMmScWu0whJBqM001aO280GhRZ4wuZVZMU1KPYBoOfCoiz+a hFO1iMHF8lzQ9CR5uND886C4jpe490D9ke150x4EKhD5UveY5q3nYTaD5Gv8Z7loTy6CMy83H3d9 hQFgu2xReKPVoNI3r6SfGQAelYXTk/ti9BbgyQ== )`
	pcast.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20220618011654 20220320001654 62839 pcast.gov. H2TQlEuhzIcfxpBYmYwbW8qkYTbBDaMMUCGWS3EjYfF0eVsC7sFX/WIBkwCqiHKbp5gPTGagODua zjvi4+YmFcMC028BS/JTvc5Ggri6e5CzXTv1UyLjq3TUJ9Dmgw9TBKXgkQvqXzEUsPwO9i/iAbWB 1fovxmnLvIarNscOL68DLFBpK+on6qVW+7NAZ8y3yuvkipMZU7Gi7jmsRE4t5CiapIia8rwAOph6 sb/JGNGbO+s69WcLq2WIzFDnXe1wnSyEQHjrwIWm9EUMg9X1Xs5SbdFzFFnmE6HVCkJI2xZNKb4e JDJYomHp62EKAYvXlqHvw8WuWlYbEt6IXJ//6vB77yNvR1YQx6p+zk90DL1he+eQiAkpgsuof3BW eXfHryqnFGMp2YBdqtEGqFGHxwG5vOD9mwl8NKjWpkKevRxJHjU6P0l8eLG3FbEDhuIhnLzTnUqs 5YFusNeOPd0+XTwc05auFqvkyNMjsNJwAv7CbzIbV4Q3VCxzXuD853Wzm5se9SuBok/gDJbSYKUL WKBAZ2ZQECCOzF+nHtc+wTzzmNIGge4okQ2LV4+oDvBvK6ZCJWIYyXLR04wyqkdPfd0xl4wMXr14 soH032til7bz4yRrwknwewhTDFXZ/xG+cL6NzBRHiTpdW0rTPdKDLL69z3IY2RH1HgqDG8ntF/s= )
	RRSIG=6216 and DNSKEY=6216 verifies the DNSKEY RRset
	RRSIG=62839 and DNSKEY=62839/SEP verifies the DNSKEY RRset
	DNSKEY=32949 is now in the chain-of-trust
	DNSKEY=6216 is now in the chain-of-trust
	Query to foxbat.doe.GOV for PCAST.GOV/A
	Received 791 bytes from 205.254.143.110
	;; Response received from 205.254.143.110 (791 octets) ;; HEADER SECTION ;; id = 56247 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2022011906 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20220618011654 20220320001654 6216 pcast.gov. mvz5JBglRCS6ZIzMWFvS8ay1/qZ93/tp9+Dk1n3voflsr94SsyzcKwDjASySzmimbSC0e+GUL/ht MM3a6392R0tcQ91S06uc3745Voox7Q1vEZThu0X/mHtl66v0+op2smhE0Y5iq5UDX+YpzM4USKOj 7zOwOu6ZvB1pHTdrQ3ZXMn7mOcClmyna4ZM0OSgG+10RfzfjhNfzntPVI2fprLu3H2u9uB5wc/Pa PNvpNau7hhsvIldpYf/nq5Wlsz7M2yB34Of4poKB6zyC2Nc5kzb4CegVvC2I2TyBYxhDbPtrDVm5 TGsPz3qdg+rdCjwZo6fNcQU+2xYdxlakOpOaaw== ) 7KD47FQOSMH3SVHDQ5DEOKR0N0JLB1MN.pcast.gov. 3600 IN NSEC3 ( 1 0 100 ef507a71a8e259ec 9j2ccasj88ridgrn5g7qukr1d95mpur3 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 7KD47FQOSMH3SVHDQ5DEOKR0N0JLB1MN.pcast.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20220618011654 20220320001654 6216 pcast.gov. aa/9HvsnaIHfuldYfKS4hOjfR806pCqkUw06N065x0nv2uAxu6oXk79aZbWixrpY+nlrc72Qf+l2 TiIWdTYJCCiO4rA4eR97sF/dpXUI4dg68dla5GmFnMEXr2yOuhUjXOR8Pyb0NDTNMmqAZfKMHtne 0uKVQ7kvKcWp79PUvg4+iMDUYCFyB+y0Y5wwSrTpzD5Mms4IaRmhe2eMQEbREH5DWHI3QdYHJ/eF oKAM4RZJ6DPnpFfDN+/byMdl3yMZ3h8GVOGJ6YIYQw6HstsGLXEQeVSaM8YRk7uncUNsA4SPtg1P xU+totYmaan/hndZC/TWsZ9PMfuguhZ/vDaZOg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	foxbat.doe.GOV is authoritative for PCAST.GOV
	Found RRSIG signed by pcast.gov zone
	Query to fulcrum.doe.GOV for PCAST.GOV/SOA
	Received 406 bytes from 205.254.144.110
	;; Response received from 205.254.144.110 (406 octets) ;; HEADER SECTION ;; id = 9359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN SOA ;; ANSWER SECTION (2 records) pcast.gov. 86400 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2022011906 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 86400 IN RRSIG ( SOA 8 2 86400 20220618011654 20220320001654 6216 pcast.gov. mvz5JBglRCS6ZIzMWFvS8ay1/qZ93/tp9+Dk1n3voflsr94SsyzcKwDjASySzmimbSC0e+GUL/ht MM3a6392R0tcQ91S06uc3745Voox7Q1vEZThu0X/mHtl66v0+op2smhE0Y5iq5UDX+YpzM4USKOj 7zOwOu6ZvB1pHTdrQ3ZXMn7mOcClmyna4ZM0OSgG+10RfzfjhNfzntPVI2fprLu3H2u9uB5wc/Pa PNvpNau7hhsvIldpYf/nq5Wlsz7M2yB34Of4poKB6zyC2Nc5kzb4CegVvC2I2TyBYxhDbPtrDVm5 TGsPz3qdg+rdCjwZo6fNcQU+2xYdxlakOpOaaw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to foxbat.doe.GOV for PCAST.GOV/A
	Received 791 bytes from 205.254.143.110
	;; Response received from 205.254.143.110 (791 octets) ;; HEADER SECTION ;; id = 11466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2022011906 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20220618011654 20220320001654 6216 pcast.gov. mvz5JBglRCS6ZIzMWFvS8ay1/qZ93/tp9+Dk1n3voflsr94SsyzcKwDjASySzmimbSC0e+GUL/ht MM3a6392R0tcQ91S06uc3745Voox7Q1vEZThu0X/mHtl66v0+op2smhE0Y5iq5UDX+YpzM4USKOj 7zOwOu6ZvB1pHTdrQ3ZXMn7mOcClmyna4ZM0OSgG+10RfzfjhNfzntPVI2fprLu3H2u9uB5wc/Pa PNvpNau7hhsvIldpYf/nq5Wlsz7M2yB34Of4poKB6zyC2Nc5kzb4CegVvC2I2TyBYxhDbPtrDVm5 TGsPz3qdg+rdCjwZo6fNcQU+2xYdxlakOpOaaw== ) 7KD47FQOSMH3SVHDQ5DEOKR0N0JLB1MN.pcast.gov. 3600 IN NSEC3 ( 1 0 100 ef507a71a8e259ec 9j2ccasj88ridgrn5g7qukr1d95mpur3 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 7KD47FQOSMH3SVHDQ5DEOKR0N0JLB1MN.pcast.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20220618011654 20220320001654 6216 pcast.gov. aa/9HvsnaIHfuldYfKS4hOjfR806pCqkUw06N065x0nv2uAxu6oXk79aZbWixrpY+nlrc72Qf+l2 TiIWdTYJCCiO4rA4eR97sF/dpXUI4dg68dla5GmFnMEXr2yOuhUjXOR8Pyb0NDTNMmqAZfKMHtne 0uKVQ7kvKcWp79PUvg4+iMDUYCFyB+y0Y5wwSrTpzD5Mms4IaRmhe2eMQEbREH5DWHI3QdYHJ/eF oKAM4RZJ6DPnpFfDN+/byMdl3yMZ3h8GVOGJ6YIYQw6HstsGLXEQeVSaM8YRk7uncUNsA4SPtg1P xU+totYmaan/hndZC/TWsZ9PMfuguhZ/vDaZOg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20220618011654 20220320001654 6216 pcast.gov. mvz5JBglRCS6ZIzMWFvS8ay1/qZ93/tp9+Dk1n3voflsr94SsyzcKwDjASySzmimbSC0e+GUL/ht MM3a6392R0tcQ91S06uc3745Voox7Q1vEZThu0X/mHtl66v0+op2smhE0Y5iq5UDX+YpzM4USKOj 7zOwOu6ZvB1pHTdrQ3ZXMn7mOcClmyna4ZM0OSgG+10RfzfjhNfzntPVI2fprLu3H2u9uB5wc/Pa PNvpNau7hhsvIldpYf/nq5Wlsz7M2yB34Of4poKB6zyC2Nc5kzb4CegVvC2I2TyBYxhDbPtrDVm5 TGsPz3qdg+rdCjwZo6fNcQU+2xYdxlakOpOaaw== )`
	RRSIG=6216 and DNSKEY=6216 verifies the SOA RRset

PCAST.GOV

	Query to fulcrum.doe.GOV for PCAST.GOV/A
	Received 791 bytes from 205.254.144.110
	;; Response received from 205.254.144.110 (791 octets) ;; HEADER SECTION ;; id = 53134 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2022011906 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20220618011654 20220320001654 6216 pcast.gov. mvz5JBglRCS6ZIzMWFvS8ay1/qZ93/tp9+Dk1n3voflsr94SsyzcKwDjASySzmimbSC0e+GUL/ht MM3a6392R0tcQ91S06uc3745Voox7Q1vEZThu0X/mHtl66v0+op2smhE0Y5iq5UDX+YpzM4USKOj 7zOwOu6ZvB1pHTdrQ3ZXMn7mOcClmyna4ZM0OSgG+10RfzfjhNfzntPVI2fprLu3H2u9uB5wc/Pa PNvpNau7hhsvIldpYf/nq5Wlsz7M2yB34Of4poKB6zyC2Nc5kzb4CegVvC2I2TyBYxhDbPtrDVm5 TGsPz3qdg+rdCjwZo6fNcQU+2xYdxlakOpOaaw== ) 7KD47FQOSMH3SVHDQ5DEOKR0N0JLB1MN.pcast.gov. 3600 IN NSEC3 ( 1 0 100 ef507a71a8e259ec 9j2ccasj88ridgrn5g7qukr1d95mpur3 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 7KD47FQOSMH3SVHDQ5DEOKR0N0JLB1MN.pcast.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20220618011654 20220320001654 6216 pcast.gov. aa/9HvsnaIHfuldYfKS4hOjfR806pCqkUw06N065x0nv2uAxu6oXk79aZbWixrpY+nlrc72Qf+l2 TiIWdTYJCCiO4rA4eR97sF/dpXUI4dg68dla5GmFnMEXr2yOuhUjXOR8Pyb0NDTNMmqAZfKMHtne 0uKVQ7kvKcWp79PUvg4+iMDUYCFyB+y0Y5wwSrTpzD5Mms4IaRmhe2eMQEbREH5DWHI3QdYHJ/eF oKAM4RZJ6DPnpFfDN+/byMdl3yMZ3h8GVOGJ6YIYQw6HstsGLXEQeVSaM8YRk7uncUNsA4SPtg1P xU+totYmaan/hndZC/TWsZ9PMfuguhZ/vDaZOg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fulcrum.doe.GOV is authoritative for PCAST.GOV
	Found RRSIG signed by pcast.gov zone
	Query to fulcrum.doe.GOV for PCAST.GOV/A
	Received 791 bytes from 205.254.144.110
	;; Response received from 205.254.144.110 (791 octets) ;; HEADER SECTION ;; id = 21505 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PCAST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) pcast.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2022011906 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20220618011654 20220320001654 6216 pcast.gov. mvz5JBglRCS6ZIzMWFvS8ay1/qZ93/tp9+Dk1n3voflsr94SsyzcKwDjASySzmimbSC0e+GUL/ht MM3a6392R0tcQ91S06uc3745Voox7Q1vEZThu0X/mHtl66v0+op2smhE0Y5iq5UDX+YpzM4USKOj 7zOwOu6ZvB1pHTdrQ3ZXMn7mOcClmyna4ZM0OSgG+10RfzfjhNfzntPVI2fprLu3H2u9uB5wc/Pa PNvpNau7hhsvIldpYf/nq5Wlsz7M2yB34Of4poKB6zyC2Nc5kzb4CegVvC2I2TyBYxhDbPtrDVm5 TGsPz3qdg+rdCjwZo6fNcQU+2xYdxlakOpOaaw== ) 7KD47FQOSMH3SVHDQ5DEOKR0N0JLB1MN.pcast.gov. 3600 IN NSEC3 ( 1 0 100 ef507a71a8e259ec 9j2ccasj88ridgrn5g7qukr1d95mpur3 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 7KD47FQOSMH3SVHDQ5DEOKR0N0JLB1MN.pcast.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20220618011654 20220320001654 6216 pcast.gov. aa/9HvsnaIHfuldYfKS4hOjfR806pCqkUw06N065x0nv2uAxu6oXk79aZbWixrpY+nlrc72Qf+l2 TiIWdTYJCCiO4rA4eR97sF/dpXUI4dg68dla5GmFnMEXr2yOuhUjXOR8Pyb0NDTNMmqAZfKMHtne 0uKVQ7kvKcWp79PUvg4+iMDUYCFyB+y0Y5wwSrTpzD5Mms4IaRmhe2eMQEbREH5DWHI3QdYHJ/eF oKAM4RZJ6DPnpFfDN+/byMdl3yMZ3h8GVOGJ6YIYQw6HstsGLXEQeVSaM8YRk7uncUNsA4SPtg1P xU+totYmaan/hndZC/TWsZ9PMfuguhZ/vDaZOg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`pcast.gov. 3600 IN RRSIG ( SOA 8 2 86400 20220618011654 20220320001654 6216 pcast.gov. mvz5JBglRCS6ZIzMWFvS8ay1/qZ93/tp9+Dk1n3voflsr94SsyzcKwDjASySzmimbSC0e+GUL/ht MM3a6392R0tcQ91S06uc3745Voox7Q1vEZThu0X/mHtl66v0+op2smhE0Y5iq5UDX+YpzM4USKOj 7zOwOu6ZvB1pHTdrQ3ZXMn7mOcClmyna4ZM0OSgG+10RfzfjhNfzntPVI2fprLu3H2u9uB5wc/Pa PNvpNau7hhsvIldpYf/nq5Wlsz7M2yB34Of4poKB6zyC2Nc5kzb4CegVvC2I2TyBYxhDbPtrDVm5 TGsPz3qdg+rdCjwZo6fNcQU+2xYdxlakOpOaaw== )`
	RRSIG=6216 and DNSKEY=6216 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PCAST.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: