DNSSEC Analyzer - PKI-LAB.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-13 15:49:40 UTC, NTP stratum 4

Analyzing DNSSEC problems for PKI-LAB.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (1139 bytes) ;; HEADER SECTION ;; id = 26597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to m.root-servers.net for PKI-LAB.GOV/A
	Received 669 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (669 bytes) ;; HEADER SECTION ;; id = 56840 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 43472 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (406 bytes) ;; HEADER SECTION ;; id = 15055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 12626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40499 is now in the chain-of-trust
	Query to d.gov-servers.net for PKI-LAB.GOV/A
	Received 497 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (497 bytes) ;; HEADER SECTION ;; id = 28658 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI-LAB.GOV. 86400 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 86400 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 3600 IN DS 8656 8 1 605939941cdcc9626fe8a9a30126775a7a1eba28 PKI-LAB.GOV. 3600 IN DS ( 8656 8 2 abb5d6563d8ac636d882a92a107d29a80ac793d09e599ad156249b21d25689a4 ) PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5 PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 ) PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. ZSBYAAfUJW2/gULvWMoFdkCj2THg7EzvI1ChuRa9fIHRZFozR9R5PaXLX/Vj5xpiYgqazL19ybWG pXRjtPEds6RXjo20yuS+txM/0xUWa1MnIxuzJa7tr8FIdHQNxwO+mW6mpilFwHscKcccxBqQzHPh gqfXJKuq91GHFsQ18jE= ) ;; ADDITIONAL SECTION (5 records) dns1.PKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.PKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to d.gov-servers.net for PKI-LAB.GOV/DNSKEY
	Received 497 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (497 bytes) ;; HEADER SECTION ;; id = 63872 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI-LAB.GOV. 86400 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 86400 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 3600 IN DS 8656 8 1 605939941cdcc9626fe8a9a30126775a7a1eba28 PKI-LAB.GOV. 3600 IN DS ( 8656 8 2 abb5d6563d8ac636d882a92a107d29a80ac793d09e599ad156249b21d25689a4 ) PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5 PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 ) PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. ZSBYAAfUJW2/gULvWMoFdkCj2THg7EzvI1ChuRa9fIHRZFozR9R5PaXLX/Vj5xpiYgqazL19ybWG pXRjtPEds6RXjo20yuS+txM/0xUWa1MnIxuzJa7tr8FIdHQNxwO+mW6mpilFwHscKcccxBqQzHPh gqfXJKuq91GHFsQ18jE= ) ;; ADDITIONAL SECTION (5 records) dns1.PKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.PKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone PKI-LAB.GOV

PKI-LAB.GOV

	Checking DS between GOV and PKI-LAB.GOV
	Query to b.gov-servers.net for PKI-LAB.GOV/DS
	Received 371 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (371 bytes) ;; HEADER SECTION ;; id = 38174 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) PKI-LAB.GOV. 3600 IN DS 8656 8 1 605939941cdcc9626fe8a9a30126775a7a1eba28 PKI-LAB.GOV. 3600 IN DS ( 8656 8 2 abb5d6563d8ac636d882a92a107d29a80ac793d09e599ad156249b21d25689a4 ) PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5 PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 ) PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. ZSBYAAfUJW2/gULvWMoFdkCj2THg7EzvI1ChuRa9fIHRZFozR9R5PaXLX/Vj5xpiYgqazL19ybWG pXRjtPEds6RXjo20yuS+txM/0xUWa1MnIxuzJa7tr8FIdHQNxwO+mW6mpilFwHscKcccxBqQzHPh gqfXJKuq91GHFsQ18jE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for PKI-LAB.GOV in the GOV zone
	DS=8656/SHA-1 has algorithm RSASHA256
	DS=8656/SHA-256 has algorithm RSASHA256
	DS=56245/SHA-1 has algorithm RSASHA256
	DS=56245/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. ZSBYAAfUJW2/gULvWMoFdkCj2THg7EzvI1ChuRa9fIHRZFozR9R5PaXLX/Vj5xpiYgqazL19ybWG pXRjtPEds6RXjo20yuS+txM/0xUWa1MnIxuzJa7tr8FIdHQNxwO+mW6mpilFwHscKcccxBqQzHPh gqfXJKuq91GHFsQ18jE= )`
	RRSIG=40499 and DNSKEY=40499 verifies the DS RRset
	DS=8656/SHA-1 is now in the chain-of-trust
	DS=56245/SHA-1 is now in the chain-of-trust
	`PKI-LAB.GOV. 3600 IN DS 8656 8 1 605939941cdcc9626fe8a9a30126775a7a1eba28`
	`PKI-LAB.GOV. 3600 IN DS ( 8656 8 2 abb5d6563d8ac636d882a92a107d29a80ac793d09e599ad156249b21d25689a4 )`
	`PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5`
	`PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 )`
	Query to dns2.PKI-LAB.GOV for PKI-LAB.GOV/DNSKEY
	Error querying dns2.PKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for PKI-LAB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2340 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2340 bytes) ;; HEADER SECTION ;; id = 26785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc4pb264JNeKft+JqAkYuMYow6A1qy8Ift3VvrsIHMGFeye20wuW2+tngweE3I89/4tIgAHm 6ePZgJoCY/W9WavwlKspcHo910RMPWVMKjpgYSmRRtpoLiuwLbcwDT8af8prYdmqQo4/uz+Te68D K1VzpYYVb5j73IZhQQDdcoaZ7Q0EUU+fzTxZIZ0/MBcPJn1Co5bZRsQLiZSF1U0RolMpp9iXPyAc QfCWr0H567q+fcrIBb+NTZOCFDL6FdnpichFmV+9AlIM9BGK8yj2kFiCsZzZ394XDkYRG467yHAn bTS9FyLPwrM4/wP4/6J+U0qDEY58jrqIS1cxftBhyDk= ) ; Key ID = 17091 PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeXH7OYBauHHflHMqUugD3a6amYAJ5l8WF1tsiLFUskdXYPu/ZpouxXvAyFSx47rydP8QtZR Rp4c2MzqojgcPDDVjwAg9Q6TAr9JGgAtNBKXd+8vYQXFjMm8QvEzWKminkzlmkJ2V5PSCCXPFI7A T/GTWvbW0C0I5esTvt7Ji18oFXx+YcPsI+V26YHkRcKeOzaWaR4AiDamNSOalYHHoQbZzK7/nzLT H3EkSWMtR8IaYrCQOtKHmGZJ4oELMbRYGzAPzLio7bRiJoB0jon3wAsnqCMirpIte/HrJDVcNM1Z WzZrnZoUAv9MJJfWHPHQv7aPTRBevqq6wmW41ka/Hqs= ) ; Key ID = 57888 PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb87zMBsENmPh0oeLZRb9LoPiEeQFYswLgKoJ8zNDS/dDwf7fKYfauG9bBmmXVcljs0nO0QG s0Ty40v4+zE7jU5kriphKxuZRXuiLD9QFenDnFv1dehFZnknHf24BAP19BjU3YaT0TuXnjVpXlXG RsK3dnnZF/jkm6LrhyCcPWNbWDjOgOzIAJeWGW0ZF2k+L/ZosVw9INmxHm62aKKJJEpdWxH6huJ8 vlMnc7DZEVhrwITyFCyrvvzIh0eJV0D6R9madS0AwgKpH6RT34nKJt+oBuKMuFzSSt0rV55D1n/3 1dhkGAOAWBES1uxdpcfF0ptDKEuq53nnAcSxkpanEuc= ) ; Key ID = 8656 PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb06s2CPiry/ngu32leCgZfEcUxTWJ4YVLca9jOQD81nzJI0uR7/5IaPrataWaLcsuQTL15j YYduzZkg+gy5sxBa2L3Np9ysqfkvTkUaphihgIX+fGH9fRvTkXcNkGhxaXN4O8OqZzqdYY9+eiwy fGezVvpuon0/EdOnTvAe3KZFCqziPnDPhPemgHa+CV94qqcLG5ZLVIIVXOcbMUPKekfBqbQCtJuz hHpsmG8yyzomi63Zk/bvBFunoKn7CYHhF0wFbVhaVwb85qwF7RsPvectVCxzjri1HeSwa111iMjH I3gIe1VWd8MrnJL3VQzjx+7PIt1h149FkiJBoPB4DMs= ) ; Key ID = 56245 PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219200708 20181212200708 17091 pki-lab.gov. bJKItgaJ4n4WlwW3powPEbejzrDFosJG9E5LSxXBKJrQe1uAKLlEVRNbLVAFCzIHMS26oPBRmjVb wOu8v8FEavKS6myE8duuKuKUJDYbMXntXxoM81mJPVdkYHtCR92iALQ7x+3oOTMEDLBqt5demAe/ QA/RYjiVIS+hDEBjkYSILu9PxgyeGS+/Jp3oYrzbiBQaAMNhROhvTb7TnKNR1ZEDGkmgSGAN2Fo3 rlC3AM2+c13DRMGlhoi0bHLzV3KRBf1w/n+OB9GY4+/IWJxCswflIoAtNrTXHtVNdBORWq3Smry8 JmKNL/fn9/eagyYI5hrdYIIgjMiqwM56+mjWQQ== ) PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219200708 20181212200708 57888 pki-lab.gov. tlCyIT4Is7Em3VPCB6+kAEL8NY4e64LfPMgbrCwzt4du6o8l5J0UtQrCq2i0FmagaT4Y5/ZfUwOv VXRDXG9AoAI8/Cd77IxvTiKeKrA/VTs4+L/z1NFp4ix7q2UoueqwBIvDL4b3lvYdLazasB7RbDmD +7L13nkwaM/1ufVeweZEvYcl0fvVUHp5/G8YLWbpaCE0YfBYrUAhgyCKf9umzhGvEpP0elAxiBwN 9gIx0IvQpvyHNCWOTfgZya0IcKNT4BQkl+KvrUu4naKx6CfbVuBU+q+g8ESMKT4n+VNiRqaNyTCS roWVbMoOdGLY9CuHAT5dXgwZzFZKvZsTkLXBrQ== ) PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219200708 20181212200708 8656 pki-lab.gov. ew/0q4RJrYpmP8I3dcEqMB3LZYU7jw8O1QfiUoZJnwvZnvpg98D0LGkbijnJxTgAhmlX397MeEvn O8oDR7zt9PPQ4i+RjTZQ8FlXDnaxfW25PqVupXeJY9CqDT0F0YlFf4RE8eV3Vkyd5g+E2Hb5t5sK XnQLeqR/6yAgr8g2KUZAfMj3NhzEFY/PZj5/FDKw9NUtLM+f++tgiTwu5AyzbcVhvKL2Z3k1La4r 4HY10akDvCpSm7joOmQqxtcenhQeAxe6RT/phv4oQv9yHjW35eFIIDExe+JRaxnleP7CoVZ69Onm umLxV/L1pG6/ZsJLJZSf+YmIZnc9zD/bY0Gsig== ) PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219200708 20181212200708 56245 pki-lab.gov. pT2cCJq75PqHLD7M9BvL6VYvfBYPi1oshHu0P91kGHW7WJwHVBl6z6P7eJqzGX/mdaZJtig9ijWW OOlBb5/xZVCvJQntXrxW8LSccDtRJa+5DpsbkO1wRlrJn1pT35ccg0lAGaAj1Lx17KBQv4XajQOL 2Tr4lfRBCZ5KuVuekSkyXfmaCR08yxB7ewHRmqfk/NbMP3aZyjcJo60GPmAOlaIwfgNlH6NNxCcg B4NRMXJzvuvK6HkE1KMC1e8wFvLzM4pOe8+6vYxekCsF+poYed24BhSbSP/3SIzx3yWdHqBe9fnZ N2S435fLis6HYOwMpnv9+xj7FyxNb4f5AVxs1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for PKI-LAB.GOV
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc4pb264JNeKft+JqAkYuMYow6A1qy8Ift3VvrsIHMGFeye20wuW2+tngweE3I89/4tIgAHm 6ePZgJoCY/W9WavwlKspcHo910RMPWVMKjpgYSmRRtpoLiuwLbcwDT8af8prYdmqQo4/uz+Te68D K1VzpYYVb5j73IZhQQDdcoaZ7Q0EUU+fzTxZIZ0/MBcPJn1Co5bZRsQLiZSF1U0RolMpp9iXPyAc QfCWr0H567q+fcrIBb+NTZOCFDL6FdnpichFmV+9AlIM9BGK8yj2kFiCsZzZ394XDkYRG467yHAn bTS9FyLPwrM4/wP4/6J+U0qDEY58jrqIS1cxftBhyDk= ) ; Key ID = 17091`
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeXH7OYBauHHflHMqUugD3a6amYAJ5l8WF1tsiLFUskdXYPu/ZpouxXvAyFSx47rydP8QtZR Rp4c2MzqojgcPDDVjwAg9Q6TAr9JGgAtNBKXd+8vYQXFjMm8QvEzWKminkzlmkJ2V5PSCCXPFI7A T/GTWvbW0C0I5esTvt7Ji18oFXx+YcPsI+V26YHkRcKeOzaWaR4AiDamNSOalYHHoQbZzK7/nzLT H3EkSWMtR8IaYrCQOtKHmGZJ4oELMbRYGzAPzLio7bRiJoB0jon3wAsnqCMirpIte/HrJDVcNM1Z WzZrnZoUAv9MJJfWHPHQv7aPTRBevqq6wmW41ka/Hqs= ) ; Key ID = 57888`
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb87zMBsENmPh0oeLZRb9LoPiEeQFYswLgKoJ8zNDS/dDwf7fKYfauG9bBmmXVcljs0nO0QG s0Ty40v4+zE7jU5kriphKxuZRXuiLD9QFenDnFv1dehFZnknHf24BAP19BjU3YaT0TuXnjVpXlXG RsK3dnnZF/jkm6LrhyCcPWNbWDjOgOzIAJeWGW0ZF2k+L/ZosVw9INmxHm62aKKJJEpdWxH6huJ8 vlMnc7DZEVhrwITyFCyrvvzIh0eJV0D6R9madS0AwgKpH6RT34nKJt+oBuKMuFzSSt0rV55D1n/3 1dhkGAOAWBES1uxdpcfF0ptDKEuq53nnAcSxkpanEuc= ) ; Key ID = 8656`
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb06s2CPiry/ngu32leCgZfEcUxTWJ4YVLca9jOQD81nzJI0uR7/5IaPrataWaLcsuQTL15j YYduzZkg+gy5sxBa2L3Np9ysqfkvTkUaphihgIX+fGH9fRvTkXcNkGhxaXN4O8OqZzqdYY9+eiwy fGezVvpuon0/EdOnTvAe3KZFCqziPnDPhPemgHa+CV94qqcLG5ZLVIIVXOcbMUPKekfBqbQCtJuz hHpsmG8yyzomi63Zk/bvBFunoKn7CYHhF0wFbVhaVwb85qwF7RsPvectVCxzjri1HeSwa111iMjH I3gIe1VWd8MrnJL3VQzjx+7PIt1h149FkiJBoPB4DMs= ) ; Key ID = 56245`
	DNSKEY=8656/SEP is now in the chain-of-trust
	DS=8656/SHA-1 verifies DNSKEY=8656/SEP
	DS=8656/SHA-256 verifies DNSKEY=8656/SEP
	DNSKEY=56245/SEP is now in the chain-of-trust
	DS=56245/SHA-1 verifies DNSKEY=56245/SEP
	DS=56245/SHA-256 verifies DNSKEY=56245/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219200708 20181212200708 17091 pki-lab.gov. bJKItgaJ4n4WlwW3powPEbejzrDFosJG9E5LSxXBKJrQe1uAKLlEVRNbLVAFCzIHMS26oPBRmjVb wOu8v8FEavKS6myE8duuKuKUJDYbMXntXxoM81mJPVdkYHtCR92iALQ7x+3oOTMEDLBqt5demAe/ QA/RYjiVIS+hDEBjkYSILu9PxgyeGS+/Jp3oYrzbiBQaAMNhROhvTb7TnKNR1ZEDGkmgSGAN2Fo3 rlC3AM2+c13DRMGlhoi0bHLzV3KRBf1w/n+OB9GY4+/IWJxCswflIoAtNrTXHtVNdBORWq3Smry8 JmKNL/fn9/eagyYI5hrdYIIgjMiqwM56+mjWQQ== )`
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219200708 20181212200708 57888 pki-lab.gov. tlCyIT4Is7Em3VPCB6+kAEL8NY4e64LfPMgbrCwzt4du6o8l5J0UtQrCq2i0FmagaT4Y5/ZfUwOv VXRDXG9AoAI8/Cd77IxvTiKeKrA/VTs4+L/z1NFp4ix7q2UoueqwBIvDL4b3lvYdLazasB7RbDmD +7L13nkwaM/1ufVeweZEvYcl0fvVUHp5/G8YLWbpaCE0YfBYrUAhgyCKf9umzhGvEpP0elAxiBwN 9gIx0IvQpvyHNCWOTfgZya0IcKNT4BQkl+KvrUu4naKx6CfbVuBU+q+g8ESMKT4n+VNiRqaNyTCS roWVbMoOdGLY9CuHAT5dXgwZzFZKvZsTkLXBrQ== )`
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219200708 20181212200708 8656 pki-lab.gov. ew/0q4RJrYpmP8I3dcEqMB3LZYU7jw8O1QfiUoZJnwvZnvpg98D0LGkbijnJxTgAhmlX397MeEvn O8oDR7zt9PPQ4i+RjTZQ8FlXDnaxfW25PqVupXeJY9CqDT0F0YlFf4RE8eV3Vkyd5g+E2Hb5t5sK XnQLeqR/6yAgr8g2KUZAfMj3NhzEFY/PZj5/FDKw9NUtLM+f++tgiTwu5AyzbcVhvKL2Z3k1La4r 4HY10akDvCpSm7joOmQqxtcenhQeAxe6RT/phv4oQv9yHjW35eFIIDExe+JRaxnleP7CoVZ69Onm umLxV/L1pG6/ZsJLJZSf+YmIZnc9zD/bY0Gsig== )`
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219200708 20181212200708 56245 pki-lab.gov. pT2cCJq75PqHLD7M9BvL6VYvfBYPi1oshHu0P91kGHW7WJwHVBl6z6P7eJqzGX/mdaZJtig9ijWW OOlBb5/xZVCvJQntXrxW8LSccDtRJa+5DpsbkO1wRlrJn1pT35ccg0lAGaAj1Lx17KBQv4XajQOL 2Tr4lfRBCZ5KuVuekSkyXfmaCR08yxB7ewHRmqfk/NbMP3aZyjcJo60GPmAOlaIwfgNlH6NNxCcg B4NRMXJzvuvK6HkE1KMC1e8wFvLzM4pOe8+6vYxekCsF+poYed24BhSbSP/3SIzx3yWdHqBe9fnZ N2S435fLis6HYOwMpnv9+xj7FyxNb4f5AVxs1g== )`
	RRSIG=17091 and DNSKEY=17091 verifies the DNSKEY RRset
	RRSIG=57888 and DNSKEY=57888 verifies the DNSKEY RRset
	RRSIG=8656 and DNSKEY=8656/SEP verifies the DNSKEY RRset
	RRSIG=56245 and DNSKEY=56245/SEP verifies the DNSKEY RRset
	DNSKEY=17091 is now in the chain-of-trust
	DNSKEY=57888 is now in the chain-of-trust
	Query to dns2.PKI-LAB.GOV for PKI-LAB.GOV/A
	Received 1376 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1376 bytes) ;; HEADER SECTION ;; id = 23532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218200715 20181211200715 17091 pki-lab.gov. oAUOPmKkcaQ42ajI9nhXJTOaS3xIGIRJVml4KEvbY3z3P8IEKQ93Dy+e/2vZ7FkJqBTH5ujPJKr2 QlJyvS041+2Bai2hsbnbBgKUfwHG6EQjEKb6F2r4J1AFUgGDO7ZEROjGbQzpvqxiSy4B2THOHuw0 Et4b8jpQyG+cR19Ay01wrzt9H7aSmlLN5IDMUjt4RitBSavEc6CarSlvMSNfbB2sOgClD2DsCglf cbvTxUtHQtYfgjyYjUZsnFkzZnwGKro10bny+PhAnYUUORLprw82WPCBzioUM4kiD1rgpyRI9oeI Wq7FM+oJuBiV8EnGvNSW40ESNaiWQaiYVoV8hQ== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181219190113 20181212190113 57888 pki-lab.gov. DM6LaxKiIXJHND958QHqvna5DHbAHEeARmC4Z+PVIxL10YhQJLWtnviXvay2OGBa3t+BVW5KCe1x zWt4bCmN8KSAzRGabZ604XmlZ+E7Cfg7kDrASszs7rgflADUx49XGITqpUfZ/pFglW1x95Tjj0Rh fh5jnmdxyqaurpK47f2wBmSDaXOho6UpeDXkOMFDxn8x7tenNf8F8hLkWC26f7/WIqIIn2vOc5U0 u5HfC8SIW/7P+fQNgkeeOxpUo41Qk3BNm9X7va9aq+w9nxDuzR+KWNUoWJpL/c7HCdn1jUAuj00I MOxARk2Gvlq2jJ2Ycy57Jk6QGsHXui2Y591EWw== ) phctgii9svth8uq9i113r1009ef4sled.PKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 8f9bcb644bd9ccea phctgii9svth8uq9i113r1009ef4slee NS SOA RRSIG DNSKEY NSEC3PARAM ) phctgii9svth8uq9i113r1009ef4sled.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20181219013112 20181212013112 17091 pki-lab.gov. sW74V5mbBK4/UQDFNv5XVxxT2RYU8oAtbOXYR2Ebx2vC3BaN5oiCLH0r14JpQnpe4SYnUVcB8qWA XIp9RdSmIzByisFYVYX97X+eLGm1Dr+x4edi7v5ye+wGhfGb5EgUsrzhEk6AGMQuoiWMbMSVBWrv VJe3yseRMaKHZd9pwKLwiEBvRuPY1+MrcOtu6Er5+6sFyJr4rm+GZdgZ36Fu4hN7qiIU4UOP+hi0 vXUre2NDSh5ceBLa4s54brCZ0cfF1SFPcLs20mxszg4LPYQfJi3uhotHqZlj0mfkWGSuVR03veM7 QF+yWeZSoW4ypLqlLZ9dUiP6Cm5NbN1M/rHfMg== ) phctgii9svth8uq9i113r1009ef4sled.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20181219190113 20181212190113 57888 pki-lab.gov. DirsIkGI0aR20Eur4C/TE8muedyVuxGVLQ4J7wGtCNQiI0IUzrJHJ2XGBJIgcgj1fuu5+LO4+JS1 JPQ8TkQXtGDsgCnqRdbwIo2aDJKv70T0XPjPoTc/upVBKDeP3XD8hrmDcMzL9S3u5vpfljYmcI0b Xll94fThT8DvhS/D+vrFrfqtgfhVVTH9v2WtaNeOrQpv88WhLTTVFUIksNtfHChQw1VPXMOc9q1I ksNoIKOOxqhmsU5qIXBzVibVQPw5luLUNdTB3vdzJqzN8rsPossry5Wk07sv9sjQnELcRfqBJ3US Ru7dNIVaehRKBl29vWfP0gzpnBq065a650IrZw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PKI-LAB.GOV is authoritative for PKI-LAB.GOV
	Found RRSIG signed by pki-lab.gov zone
	Query to dns1.PKI-LAB.GOV for PKI-LAB.GOV/SOA
	Received 3801 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3801 bytes) ;; HEADER SECTION ;; id = 64660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218195810 20181211195810 17091 pki-lab.gov. tc6gASDwE/fx8jTc72WtKO2S7ZFq7t8JU7cNbdnFX6Rxc3XTwq4F/KxP3+vKDVSU+jHEzJAFTADu GSsVbSO3OytXR5fktXsdC2x0by8EWzNw/DIsaVdfg0akVcU5UQZ4FJwRGBzXOLNHLGqUgwL82jvI axAU41Gmy0nu6WjnaDag1dj8oicSVZW7wkgASBW2Tsm8bKM/rozDL83qXc1WPH22dFWY0EuSiSq+ DQdmGZ+wW/y2JRhOqiZFADN42huDNoRAypjmDhs9OB8hcFNZqOF+BAFqPzjNII66p9euiEcR2Puy 2IZpOcHhyxEt7Y68qM6kHGS4bD+XiR5ER1bj4g== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181219175514 20181212175514 57888 pki-lab.gov. jEP7MgKugPUjvGRAYGg7MfkAcsj9W9RC8mgV6v6dTwbcsDBH4G5mE0ecSSRNK3Nol2ZSQb6wMwkb 2UDIWu0KZjnAqPweb3LmNtCzVmtI3SBkK4CzSRyQqqxmqzpbJoZXaA0Uf3WfQqK/L1mBAub+TPPc 5ILotI4FikIgtf/WsXdRgVwzd8hV3zn57C7LiHKVJQanE8fIrnnR55YGeJUsP8iPDsyG7oJO+qxB A1ii3KTCcbk4uIlFVZqe4QKR/Wwm2eFj70Tlq3wCjUr6FxYQ6mE1Oi7LvP3cH2Rmxqxw+lZWhGTZ d661jfGSrvAS/sDOInodW9SVcXp3+1IshlTEoQ== ) ;; AUTHORITY SECTION (4 records) PKI-LAB.GOV. 500 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20181219013050 20181212013050 17091 pki-lab.gov. A+in1PaYwqk3PP1n2vyL3okg7CcElVVcl2AH3BpvineR7dGx2IEqAfMz07BeKUqt6IzUnvD8QOZj 9XheiSzswCakHjgXeSk/vJ8T4kjgiE8DDicj5GruYuBFAaAEFdiQ/lJiy4+5ZQrZaRW1bTWu7dNH LqIF+Ow5wYhZMs0jUvarGxCLhpLgHphW3o14SH7IvRx2v2LNqGKv+EygZ+2u/yurXaj3Ty+vvRRn f2Z88/eG7cqyJSd22lzYDWqIm90HBqJZfk2WG2d804Hv/mnbRWy8P3xeZOLC5dRx0gE3QARQK81y 8tTaZUcXROUFaZjOjESq2/ocTKXBietJycF5qw== ) PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20181220000827 20181213000827 57888 pki-lab.gov. bJl0Tyi9rEzIbDVQs2A/eAJlfl7P2pPVLswmMKwk6zl7Gx/fELf+npdTDXUhsRbkEtPAaAYzHwR5 s+ijO8SV44/kRdx4tGEHIq3w3p64asNsMapiO2DahQ5gm1jdqn8I2FaQ6yca0rh9/SynCdWqyDyf /vBNXBAYZS/PM2a+Z2R7CiGk6DtjgciYZuP02teTjMxYfkzhqJDKOhQaWCzFZMxT2c1lt+wg/fjF iHnlu4C+RAuyLw0KNz2yJE3wbIlaA5QEh/ZSq/Ai6vcuQUWluJjyHufzoVaGbBKDeFZVSQ9cTdGQ ENUvDdivxblBXN/peDNC45RRqCurWkIp1WM9Ow== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219013050 20181212013050 17091 pki-lab.gov. gl06HBcwHh5U+0Mh3mn3Mu3HK7uQ4qDxrSXd7eoaWb2qdO5NSl0VqpXjsmj1quvrzA9ltYg6GBVI 7tKZXZefi+SYbkFatBAMzNkCZ2T+5jGVkykKfJ4/J6qqptQce4fGXDhmtLmOHsUpPdJU68aHf6va K+AEAZLZ0D7Fdi2cWnR24KCmXa7iJ7MfS8rNfjtxZEghU0HwZtSVcpyIhYiGnSX+5+jO70NoICbk Pkomx80DY18OvdoYOVt/GmijrVEK8KUfwSvRpHnczfkWzh0f2QzfGIjLVjRrEbIoSKh3wZbT6vS9 avxinJu+Ka6BSiQde3oUad9hZeRzVKzvt3OGWA== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181220000827 20181213000827 57888 pki-lab.gov. VTrzDE3/1SoAi/frblaEabZgbOQm8RuufOU9SZqgN1TXPxyeyuX9ApcfQhkvT89ozybaHlkFH7fd duMFV0OmJlDYcDZpHSFaSTLxKvkmx3r3ZVcEgDK2DyXyOrLmz/5B4r1oYFtR+wBDTPKEf9BZXBo7 ePF+a+oqlaxfHItS/pphBgHzw6sb5a4BIrOkUWJJTKsBCjjJ0czM4TP306v2XRWwD4/QURTL2jrb ODs6OOA9gSledn8eKDv9Bpn2ZAAh/XOykyuUURLz01ufi/vyhPvfyH8D56bKM+DVoqI4Uf9EcM8g e1PCVLd4VB3x7Sh8W5g/bhiu6Gsuw9Bs3wOOlw== ) dns2.PKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219013050 20181212013050 17091 pki-lab.gov. FP4pbl6++kkanaL/kpqK3cSUHLCJvXWANGyYNy9doSCEG94xKpZe8oDwJuE0Jc85JaO0wPmZl88g M3StdT7zcZtQisVIt9yQT2hfoq/UgBK19nW2MXfMN7koWplJERB3SEiGG6Qg0d0hVp2qOzRVzfEL HvAlKLLQ9K64Qs0cpGNARQG7dNBGo18ouomPXomYrp56tTONcRxjSYyI0c2xwfFkO711/+OfpBxS OI2pS3HuZSqheIpvxQsUIGcxjJbseZzRYd6aOmdjVl0+dZOhs4EomNhFawrV2LgCsm/tv20sFvc6 K79ajnOQIJw31qPQOKHri47lIgGvhbaXhL+DGw== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181220000827 20181213000827 57888 pki-lab.gov. tpl8+z2joLs13z9PtGGnHLiKKV01CEkGnOqkiX41GPUnLjwGoqO8TPyCAem2FMBpIHHwibmAZ/UN 0stcAGeY5GqZp/I+CF1JTZ2PNg6nkU14z/0DxLw7MwNSgm5XtNGCT3RbV5gdBdtKlXr/v7yoDf7d i2InuX+oPjFUv/YlJavi52r8y8DyxZltawoJsdvqMCWAtdHJqIYXw6tXNcYXnM7Eq9KhzVT8Zjze BGRjgPQOQVkNNAmvgdyHT53+cyWBd97HkNKsFCl1MAn7L/nw/abQNoLXwkT/uLwwiBtzonFy0yMp bTpFSd1jtpt8f8JJYYwq1+QYjaS3+nCwGT4l5w== ) dns1.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219013050 20181212013050 17091 pki-lab.gov. RAY0462v4avHiODrQwDAU0tXAsgtXGegZvPuJW0u3bZGVuI0d9hV8REZToaZ0/Kmck1PPkg5xOUJ KM6AFwDB20WkbjmgzEwrUqF/61CwazG1JJ0D0twRPLIr72V7xZzCrfcYBq+b9LgVRBshXCEKt8+n jb01a/qzli5tq6ZP/Wxooeq+J+ScIayZACLguTfkwCn9/yks73AJZpm4u7CtaANQJpfPn4KIe/oa DnWhoXouCzA3xnscx/ms5XudZ1wr4xQcTOaknaw18AxEW7mYFyJqbeIakqmz6bq0gNQX+cmXrxc1 MroQQtBQV38QQmKkoCNr2O8VJt8TLN17tDxuJQ== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181220000827 20181213000827 57888 pki-lab.gov. ZT7Be9Gx5uQJ0iLaK/GKKCFvJVzgFNMOonhsu9Nd2czNE7YoWSWXkkE98O5cV5V0GpJPBoDa0vhp SI1hwfl5S08vOxr9LMBLDzV+mxYqFSVN7+Ma7AGMiUVPJsvnvouKPf80A3SwWLikr+tSNALlSHSv +TNN3EtNjz5HEBsgqLHbdxLlGAGEfY7ghvc7LJpGfFyeG11w5VqfT0O53a+ZkXCavdSm9dK2YVGB z6wwn/Fot5Y1J4OPge7wzneaqBltOe/UsJnr8IgFxSnyuvdRmxMnVa8XnF2pFYMSmZgKtHlRT4aX eL+M/dbiJViucoh7EukoMoGB3G+FaIj0kRfecA== ) dns2.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219013050 20181212013050 17091 pki-lab.gov. lGMNLgQal0k5L7oUG0sWzVk70uJGACnom/zyHwEYk2fBPvzGyAMya5VnvYxTprWy0WXvzGW4I6xx gT1VBL3sXhDV4scnKxqLTKCgYRgi7CfoDFVfKZUH9B34rd2kFE5/QrRb1IfBrDcf2ly3vFjIF1Kc JlogOJCt09jq49mVdQMP/Qus7licL91AQ1S3gfEpkS1q10c0PyvDnV4jO1TK4tfcY80AFg7+ZEcO Ls3fFG42idKusJthmUNYdvrFJI0NO2nhT0hiKuZDV3OhEAMSzlUXJW7+zqO1u7CNKU/4NQc70Mm6 SF4LpMqKIPHSRk4klrvR3Cka58JbC9I/8NIqyw== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181220000827 20181213000827 57888 pki-lab.gov. Sn1mEYnJbdVOGfds2i3+NX9byScQzFZtUlc8+Pv1OZhBFbWtzwt+qCtXKhuEdkG1lGbawN57BseS /XiLzGhumWqsQnJl6w2Ux5CqFNJZvwaK+l7i6Gvsik+lUsuVhZE0jdme90Okxm5g7wQVBc/Ha0q5 oWPrvvAghhQZJTCk5Tk+4m5/BXTHGxE3ZWHV6bAbvAZxWRszERI/EfSYk9VpKvTmo+wY8M9bt1ke WfVRwfhBNb0CtijVothT6nXZ6faFEZ5hZGhE9HBOBGtt8kga8CVWEKvd8YLzX6vOv114B/Fb49X5 0BkbgZstNIsDlAZeTEQxsU1YsXkyEeyhcaVj3g== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.PKI-LAB.GOV for PKI-LAB.GOV/SOA
	Received 3801 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3801 bytes) ;; HEADER SECTION ;; id = 5560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218200715 20181211200715 17091 pki-lab.gov. oAUOPmKkcaQ42ajI9nhXJTOaS3xIGIRJVml4KEvbY3z3P8IEKQ93Dy+e/2vZ7FkJqBTH5ujPJKr2 QlJyvS041+2Bai2hsbnbBgKUfwHG6EQjEKb6F2r4J1AFUgGDO7ZEROjGbQzpvqxiSy4B2THOHuw0 Et4b8jpQyG+cR19Ay01wrzt9H7aSmlLN5IDMUjt4RitBSavEc6CarSlvMSNfbB2sOgClD2DsCglf cbvTxUtHQtYfgjyYjUZsnFkzZnwGKro10bny+PhAnYUUORLprw82WPCBzioUM4kiD1rgpyRI9oeI Wq7FM+oJuBiV8EnGvNSW40ESNaiWQaiYVoV8hQ== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181219190113 20181212190113 57888 pki-lab.gov. DM6LaxKiIXJHND958QHqvna5DHbAHEeARmC4Z+PVIxL10YhQJLWtnviXvay2OGBa3t+BVW5KCe1x zWt4bCmN8KSAzRGabZ604XmlZ+E7Cfg7kDrASszs7rgflADUx49XGITqpUfZ/pFglW1x95Tjj0Rh fh5jnmdxyqaurpK47f2wBmSDaXOho6UpeDXkOMFDxn8x7tenNf8F8hLkWC26f7/WIqIIn2vOc5U0 u5HfC8SIW/7P+fQNgkeeOxpUo41Qk3BNm9X7va9aq+w9nxDuzR+KWNUoWJpL/c7HCdn1jUAuj00I MOxARk2Gvlq2jJ2Ycy57Jk6QGsHXui2Y591EWw== ) ;; AUTHORITY SECTION (4 records) PKI-LAB.GOV. 500 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20181219013436 20181212013436 17091 pki-lab.gov. ZY0G0+6d/pnR4vYcJtUpo26xqc38QY1uOuLgJ8QkIpx5BdkN38iUhF6KkiuPfMsxCqERSnaqwzYf yqNjLPmNicizpDMfAIk+tgdFSxiR/4yhVZ/1qTkfI5s89FSvYVlMwXY0pa19SKZlwjMSeKACGDgo I1J3s/6ntcqwPZeWuKKWMl/LukJYSBWwh0meham2nBBkMEaH9fzMuqymg81gQlEUDqFXI5p6mNjD excIHJ0esUfRvX4LIKy5qMXJlW60t7nYIaEqPWmXWODBDicLAG1C3/ibPNSAzoLlkCAcU/fCXiF2 Sy1TOZhbJyO4NWHJcZU07fLyrh7m21zVSzHSJw== ) PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20181219200708 20181212200708 57888 pki-lab.gov. KtG7Yq5+n67JEf9CilbVAG3+de3IgbzRp5AtkVf0Emgx76Z46Sya96cjcuAP9QE0MxxAYxBmGviT NQ0gGRAZ7xStoskTmUPm0LVClPfoJmXvTeAeqbVS91zh501xM7CmQD+t64d3yrGRCxrheTWjana9 8ffBuFFi1YC3LqN+Vwy3VW5IiHTxRR2Jq4DCq7YQqMYh9ZHIMMeKd0g35l3451LjdsQIWCw1R8H1 lO3wWflF018f0Zt5ZrVOcA/XXWizt1JqlhhwaMx8pYgvS9cvr0LA/w4OaSWIOvTwlaqWBkF4beHB SeE2zDli2yVSFe7qmxBT89q4gVNjZTKHPVWGDw== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219013436 20181212013436 17091 pki-lab.gov. RLuBVd/YsLuz+Ivn+Z131QAxyTgjlReXOwDf1S6JWA8C8MwtoVcYnDsCxlPNSIZmD6QJkxufq2qm 4Po7A5eYjlpb3QXoUA5b6Kwl52J3bGtGfIrfSmZWCBGLkH8Z/haew8gozTeDKgEInZ1Nz6zZvr+/ /o9LaWgWWpW6YYJOvgcDOy2i+kNVNRCPU1LTrroifpffBfnGpg8xa4EEkAVW8LOM961SizwC51nv 7DzGgl32Hx1W0y7dPdWRZJEEpGP0kmiSpney1xOp0wKaINZXTwcZ4XmmtWhPcmXkmy6qPv5qXey5 YfEgY8YGOvqpXvSh8GpV10xzhfYa2l+KeJkDCQ== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219200708 20181212200708 57888 pki-lab.gov. wQlQ2KFG0u3BiZiwyfQ6LJQRX783GDtUYWZBbf3nPUxhP3rZxN0G2MDwI3fJzkK7uHBG1y9zYe+c zBPqh6gdpp9FF+a2CLH3LeZsg4M0teXy+rGTw/O8V/TdZYewqsVbD7ILsAlyO2Xmz77naWht7TnF jAY9YJ51S4p0P2uFd3ArHx90ZFQexFCaUlioLxfOcSdDE0k+C30C5UVOjef+BsEm1eX10p+7nGyV +4HFB1r2TLGgprufyPROpFVKKURIAdAqJMeN193U5CbOBZFem/MlsybERJ7weF6QniWPj06i3haS RaAwchmyhTM3KdZxmpdgyxLqYzuZYSljTUBk3A== ) dns2.PKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219013436 20181212013436 17091 pki-lab.gov. bQDgpkapb6X/wM8Cut+no/rz6UWpDbybLgyUzqQLxJ4dzLllm/Am1YauyP1fBN2cgmUutH4haqfc yFFGQ1KbpY6kONlOiVW7UwXRy/dSsXEOOFJ13egsj/BIqekFx9qRFGINEIJIa60lhLfQbvJ4+38N Wj6vn48/wR/CB5I1ectV7hgbLi/kzGAnjFi5ObO2/rYjaD1ubBM34mFXDYizy27W8r9N8O0qzGD+ oJAFrgbW9R7/wboCbiJiH+ZowTEXqFePx3M2SvDxaLk7I39Xm1IF/CO6BosBAEr+896biTj4pbbK R03w/7G6YPlZHWzHtHHGsvW6j5aiIqN+UWMnnw== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219200708 20181212200708 57888 pki-lab.gov. Mod6MbjvhbE0va3K4HT2KUrm3+VLhjCNDS3CWpBVgeBLI5rKA4K6rRAbqUXXDgZDcs+i7s5hw8ad RGII8ysEKRjV8D9o6bAyaP1CfE3gRbf1vx/jhxxOkn+gKcz01oKpkx6UgHOCMl7IueM8+rW/tNFH mD4h/23L8XE0CpnuRlbJVJmcpw6uxBwMEzoJS1TSH0Uronv7RIxR5ztshT+QP/fSmeUIVFTo4tMw nQReLB3ibU9G/ZAB3exaPOSJkQWULkd2roLG6zGa1x7RVRCKLfbbn5g8PlrSEAf8l36hF8PzMX3b ZgE8XKd6ziRGvy/up9b239A7I66oHHbz1TQPiA== ) dns1.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219013436 20181212013436 17091 pki-lab.gov. vj5S6fXSywGGQbqSe42ZXszHHZUwlak0033dVMm87huYD3oOVXfKpUwDWUPswrrwUjGiINiwmh8U VXV2vjLMmD4fiHE+jrGFxSjpG8MKG+3u5oMSBo2kHJkNoP8ZBZdXfleRFT2I7CSRzikzJuC9fWZO WgLu6lm5YV5EMzCwkpCaC8rkt5k/Io2ZWMxRinXA2Oork6wba12eRjrmf24Jp1hiHxOw/ys3Vvv2 208NO+RhbCwTIDqHGouTxDd2ZhGIm0fscLeHopfYH9O3EvuSkwlb6dtHtE/zhibgA9e5DVxEsCj+ gYOr9fgzMThm2bQu3xG1kDfZhK07A9lDbOxyrg== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219200708 20181212200708 57888 pki-lab.gov. O0GbpXm2Kr6hrUNuMKfmOC36m3CbcSzkjHgp/KRJWGoYicm3ax5UXdlgGkuZB2ophjQgchFBMxPx AyN7ziAqhgunyd7nXcRPy4BSoABIt69W7dpmGRqO3ccnmo7a1YpFPrz9ZdZzPehi4z4tHCUn5t2H chc4K5+wdvwZc6f3UCEgNrN1Eigbgl2UbczPJlH9FJH5ZQ6ymi7GLSjaLfJB2excKSNDChUZKG5e hDEo7GLl149ihcqVrB7rJpJFdJIzPH5rG7K30RQR+a3y8JmuCi2jwPJWjEMh8WYf6UydJio+z0pK reMUVo2hIGPZraA6TCqa99OlSJEbwIjZ9xo1LA== ) dns2.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219013436 20181212013436 17091 pki-lab.gov. edoNoMJRY6O9FLo8E2uD/9XgyfyQJhVrbfJWX6TB/w9lQvPpS2FYuMQHOdQHMuvZyIcgqYKWBNqf mD3BV3E7WqATIw7GJHps62XUtw5Z78USfZexjD5S5040zie1zLsSR4KTkqZuxZ4iOTOKbAoYmLVm 2BmI7iGLGA+ZIKqPKix5rJdEtgR70G0jfd/yJMxU/RFprNpbZWw6s3MwvKjjFyRTBERB+E27EtIz Hif97E2XheNSrEc+gx7of3yiQAYoU36qRw9zi3Gaw1Z/SEBRHQW+YqmUlP6V0TIwPXafwCKjYUkP x+g8FhOGxM6CuSdFGARlpjtQn4XgfUqMMSBWiw== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219200708 20181212200708 57888 pki-lab.gov. IDr46pC5DT9GPrP5hi6KSCsTfmcI48DloZtYPnNnjGRBlqdeRNlHHsbyeMj1WLQRfjm1RyRaIV2p W92iNxjv/DN80tnHUmiXeqGX1frIomW8W8FrnnpaM9SAUYMZYaP8+PHOUy2wGcHPX8UMPojLMqmv t8PXkeesO8Rp/9nnH7RSFMO8UuVv/NJAzcQzKMS8r5BRl37cfueSpEaN/VtpieLilUhLnB1R33oh iWGuAGUNiJuQs5l2d5763balSktML9sev142xaEju1NcVrj6XsRLcgkrifyax8eAVC0/qliilixV rEK0zMSoAjefFa3qZC/Jj3IU18rMLr+lABGffw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.PKI-LAB.GOV for PKI-LAB.GOV/A
	Received 1376 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1376 bytes) ;; HEADER SECTION ;; id = 12565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218195810 20181211195810 17091 pki-lab.gov. tc6gASDwE/fx8jTc72WtKO2S7ZFq7t8JU7cNbdnFX6Rxc3XTwq4F/KxP3+vKDVSU+jHEzJAFTADu GSsVbSO3OytXR5fktXsdC2x0by8EWzNw/DIsaVdfg0akVcU5UQZ4FJwRGBzXOLNHLGqUgwL82jvI axAU41Gmy0nu6WjnaDag1dj8oicSVZW7wkgASBW2Tsm8bKM/rozDL83qXc1WPH22dFWY0EuSiSq+ DQdmGZ+wW/y2JRhOqiZFADN42huDNoRAypjmDhs9OB8hcFNZqOF+BAFqPzjNII66p9euiEcR2Puy 2IZpOcHhyxEt7Y68qM6kHGS4bD+XiR5ER1bj4g== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181219200708 20181212200708 57888 pki-lab.gov. ZcS96pojbCEnG60q0obVtwGIPEXP+lnaGvxqN0DQOrIsjVZNbURWIA2UGBT3fTsZQURotb35s8CJ 8ag07VSDxPMbodcfaW6q+kRAkLDb7Vb2cjlbhKEUjdFepGVk/x6XFBYut8ItHUKDNMiabPLE1CG8 YUHngCXvsFidz8fo4+DhzjnIb5ulsfiVJLLBSzYWyo9/llmwghimPhQ1HUC+bBduvZBAWC0iLx63 bb8qfotMDBYR+dIBaI7cPXMDiplZ5BuxrM6kFkBehT0JasyDLJrrZmmlvetjmsZgNMTpG8TzffHl /TgMhuW6qN6j35eGY1dqlHJxNXkyG848HID5Qw== ) di20c16gqh6janv2ckh24aphk6981770.PKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 a7abf86549202416 di20c16gqh6janv2ckh24aphk6981771 NS SOA RRSIG DNSKEY NSEC3PARAM ) di20c16gqh6janv2ckh24aphk6981770.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20181219013112 20181212013112 17091 pki-lab.gov. o92uzYBAQyInrwVgwbTbiDKIdjt9dDRp+83BNrDax3zp7G/xS801dcgdsdDdU9e0RBBW2rAv61YG /PjWzJXL+aAy2FRCCfGYUr43VYNG3/s8E3CpIpe4W96nPAml/sOY2HBTn/cYRHaZeeLrXCs14TA6 zFr3cfBXJF3VYJjpOXkligCs6/MXEwWTJLX6LzOGcEduBDfmX34dbvcWsPk4SigOvdqJYeIdM140 dHmN1pQPgi6XCQYlqqxdzl80+1U3m7V+fxCbsrj5BdN2qZ/ABdYsgBlrNzdYdnzJ6+bl1uplxIOk lHR4l6lthMjPvo/yv6dVBc6Zc0je+dbcXvMaMw== ) di20c16gqh6janv2ckh24aphk6981770.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20181219200708 20181212200708 57888 pki-lab.gov. 2jVhiJEbKaJL0NfXLpTaHqw+d6RB/HYbZiPEgi4eL4UUsA6FHfK4Dna4oAO0Cl1K1O8W9LYxNYBO KxukScWDcjS58XIgBN2bUvY2x8Kjh03Pr5Lvs7gvRmFeZUGzhwmCyv9llt3rc4WVniJPVK7JrXZ9 VuAENqpA7EgwdmEc06xk2seKr54+B+iRP7fpb1Y6iMaWGf5M5XjqcK0HwWWlFStmbzWRdFS9RnhA oSk71EpE6cUPRyGXOqRLWS6pYwIs1RVlDVBlVoZMyF84YiXerLG/eR6SLcL89jCZzQw1KcYlJNKy bbOJo2B08nGOzTl+c2BpqWQ2S5zfZBgd+9aVug== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218200715 20181211200715 17091 pki-lab.gov. oAUOPmKkcaQ42ajI9nhXJTOaS3xIGIRJVml4KEvbY3z3P8IEKQ93Dy+e/2vZ7FkJqBTH5ujPJKr2 QlJyvS041+2Bai2hsbnbBgKUfwHG6EQjEKb6F2r4J1AFUgGDO7ZEROjGbQzpvqxiSy4B2THOHuw0 Et4b8jpQyG+cR19Ay01wrzt9H7aSmlLN5IDMUjt4RitBSavEc6CarSlvMSNfbB2sOgClD2DsCglf cbvTxUtHQtYfgjyYjUZsnFkzZnwGKro10bny+PhAnYUUORLprw82WPCBzioUM4kiD1rgpyRI9oeI Wq7FM+oJuBiV8EnGvNSW40ESNaiWQaiYVoV8hQ== )`
	`PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181219190113 20181212190113 57888 pki-lab.gov. DM6LaxKiIXJHND958QHqvna5DHbAHEeARmC4Z+PVIxL10YhQJLWtnviXvay2OGBa3t+BVW5KCe1x zWt4bCmN8KSAzRGabZ604XmlZ+E7Cfg7kDrASszs7rgflADUx49XGITqpUfZ/pFglW1x95Tjj0Rh fh5jnmdxyqaurpK47f2wBmSDaXOho6UpeDXkOMFDxn8x7tenNf8F8hLkWC26f7/WIqIIn2vOc5U0 u5HfC8SIW/7P+fQNgkeeOxpUo41Qk3BNm9X7va9aq+w9nxDuzR+KWNUoWJpL/c7HCdn1jUAuj00I MOxARk2Gvlq2jJ2Ycy57Jk6QGsHXui2Y591EWw== )`
	RRSIG=17091 and DNSKEY=17091 verifies the SOA RRset
	RRSIG=57888 and DNSKEY=57888 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: