DNSSEC Analyzer - PKI-LAB.GOV

Domain Name:

Time: 2019-06-25 16:00:36 UTC, NTP stratum 4

Analyzing DNSSEC problems for PKI-LAB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (1139 bytes) ;; HEADER SECTION ;; id = 36355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190711000000 20190620000000 20326 . LeNUOIxGGe+xAKxr13YIXNqMAxVH7RuDXQyVclUuxA9aENp0+yYkeIL+/lkTteEhdHXNVZqYch8Q rvcsuCpDN2gKx5D5M04gKAjR5ywgvEdsZHr9DhjCZ3uvXKvbPsi614QpjYCxxvtq/ZZE6dhm59K3 N3T8Mhm5l36b6w+fR1F3Kc+eeJqy2ZjVxNe9CClE4Qy6q78Yu6rS1vZkuzG1l2AT9Gko72StWbds U2Ry9fBk+uCJOLxej37z5Rfi5EAzFcnfwQYryqCRt2go9PuD0/AulqG8wmTVz23tnwnaxowkYKxF H2yE0d7pDiFjvOyUHdGPXYwl/+GDmjrQsN6JPQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190711000000 20190620000000 20326 . LeNUOIxGGe+xAKxr13YIXNqMAxVH7RuDXQyVclUuxA9aENp0+yYkeIL+/lkTteEhdHXNVZqYch8Q rvcsuCpDN2gKx5D5M04gKAjR5ywgvEdsZHr9DhjCZ3uvXKvbPsi614QpjYCxxvtq/ZZE6dhm59K3 N3T8Mhm5l36b6w+fR1F3Kc+eeJqy2ZjVxNe9CClE4Qy6q78Yu6rS1vZkuzG1l2AT9Gko72StWbds U2Ry9fBk+uCJOLxej37z5Rfi5EAzFcnfwQYryqCRt2go9PuD0/AulqG8wmTVz23tnwnaxowkYKxF H2yE0d7pDiFjvOyUHdGPXYwl/+GDmjrQsN6JPQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	DNSKEY=59944 is now in the chain-of-trust
	Query to c.root-servers.net for PKI-LAB.GOV/A
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for PKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 669 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (669 bytes) ;; HEADER SECTION ;; id = 6901 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (658 bytes) ;; HEADER SECTION ;; id = 41287 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 18166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 34239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190701214731 20190616214231 7698 gov. gr3SMpnqXuv1bmrBjl6FAfUBvevP1IZX6nHz+ka815FjVHQX48JOHZv7lLJ8J1JMT2TxzbvUsdcU fE0JSvtMF6Dt97g4f4t4A3dtXGzDnsipCY2uOXa7ACncWiLjOjYiXxjUhsZjqS3epq0WQExuvUFU DTwTuZdx+qsU8b9gzzWjD8DDeE3Ri8utmMaMM8+5sxfqtBlqZmI9tjRJ6a4P2yV8RXWpZzlp6bRi yheZTE2RTru+NhrZ/LFtyC1M66lpS7r7T9iy6sDnbALVuo6kRfMy8PGL0mDbWitWO1Hi+NDEkaaQ hSSCo3Iv9oidW08kEV89hTlhH9Nh8oeo86bHog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190701214731 20190616214231 7698 gov. gr3SMpnqXuv1bmrBjl6FAfUBvevP1IZX6nHz+ka815FjVHQX48JOHZv7lLJ8J1JMT2TxzbvUsdcU fE0JSvtMF6Dt97g4f4t4A3dtXGzDnsipCY2uOXa7ACncWiLjOjYiXxjUhsZjqS3epq0WQExuvUFU DTwTuZdx+qsU8b9gzzWjD8DDeE3Ri8utmMaMM8+5sxfqtBlqZmI9tjRJ6a4P2yV8RXWpZzlp6bRi yheZTE2RTru+NhrZ/LFtyC1M66lpS7r7T9iy6sDnbALVuo6kRfMy8PGL0mDbWitWO1Hi+NDEkaaQ hSSCo3Iv9oidW08kEV89hTlhH9Nh8oeo86bHog== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to c.gov-servers.net for PKI-LAB.GOV/A
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for PKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 497 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (497 bytes) ;; HEADER SECTION ;; id = 50258 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI-LAB.GOV. 86400 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 86400 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 3600 IN DS ( 38524 8 2 3f678b902f9bc0182b81bf4ab73fb53adf976d01b62feef40daccde78c6b3a27 ) PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 ) PKI-LAB.GOV. 3600 IN DS 38524 8 1 d63273b8a6016093785674ba6c028beb3b4a39bc PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5 PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. ZDBeaEqJ6SyzLy0qbMvpvg3+PtqVuo3CLq/oFaNVq30dsDpEH/nsMD1ONxJ1q6EnB1TqZWY29uqD W4D+rDW7DfMqYsN5RDD7uAz2oxZCrKRfjcdOxJC8PcBHrXtBuKPdgWR442PZYya/0uYiO2eNh8cd SOgY503mU5TM9Qcmd2Y= ) ;; ADDITIONAL SECTION (5 records) dns2.PKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.PKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for PKI-LAB.GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for PKI-LAB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 497 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (497 bytes) ;; HEADER SECTION ;; id = 39358 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI-LAB.GOV. 86400 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 86400 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 3600 IN DS 38524 8 1 d63273b8a6016093785674ba6c028beb3b4a39bc PKI-LAB.GOV. 3600 IN DS ( 38524 8 2 3f678b902f9bc0182b81bf4ab73fb53adf976d01b62feef40daccde78c6b3a27 ) PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5 PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 ) PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. ZDBeaEqJ6SyzLy0qbMvpvg3+PtqVuo3CLq/oFaNVq30dsDpEH/nsMD1ONxJ1q6EnB1TqZWY29uqD W4D+rDW7DfMqYsN5RDD7uAz2oxZCrKRfjcdOxJC8PcBHrXtBuKPdgWR442PZYya/0uYiO2eNh8cd SOgY503mU5TM9Qcmd2Y= ) ;; ADDITIONAL SECTION (5 records) dns1.PKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.PKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone PKI-LAB.GOV

PKI-LAB.GOV

	Checking DS between GOV and PKI-LAB.GOV
	Query to b.gov-servers.net for PKI-LAB.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for PKI-LAB.GOV/DS: 'IPv6 transport disabled'
	Received 371 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (371 bytes) ;; HEADER SECTION ;; id = 29889 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) PKI-LAB.GOV. 3600 IN DS ( 38524 8 2 3f678b902f9bc0182b81bf4ab73fb53adf976d01b62feef40daccde78c6b3a27 ) PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 ) PKI-LAB.GOV. 3600 IN DS 38524 8 1 d63273b8a6016093785674ba6c028beb3b4a39bc PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5 PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. ZDBeaEqJ6SyzLy0qbMvpvg3+PtqVuo3CLq/oFaNVq30dsDpEH/nsMD1ONxJ1q6EnB1TqZWY29uqD W4D+rDW7DfMqYsN5RDD7uAz2oxZCrKRfjcdOxJC8PcBHrXtBuKPdgWR442PZYya/0uYiO2eNh8cd SOgY503mU5TM9Qcmd2Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for PKI-LAB.GOV in the GOV zone
	DS=38524/SHA-256 has algorithm RSASHA256
	DS=56245/SHA-256 has algorithm RSASHA256
	DS=38524/SHA-1 has algorithm RSASHA256
	DS=56245/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. ZDBeaEqJ6SyzLy0qbMvpvg3+PtqVuo3CLq/oFaNVq30dsDpEH/nsMD1ONxJ1q6EnB1TqZWY29uqD W4D+rDW7DfMqYsN5RDD7uAz2oxZCrKRfjcdOxJC8PcBHrXtBuKPdgWR442PZYya/0uYiO2eNh8cd SOgY503mU5TM9Qcmd2Y= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=38524/SHA-256 is now in the chain-of-trust
	DS=56245/SHA-256 is now in the chain-of-trust
	`PKI-LAB.GOV. 3600 IN DS ( 38524 8 2 3f678b902f9bc0182b81bf4ab73fb53adf976d01b62feef40daccde78c6b3a27 )`
	`PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 )`
	`PKI-LAB.GOV. 3600 IN DS 38524 8 1 d63273b8a6016093785674ba6c028beb3b4a39bc`
	`PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5`
	Query to dns1.PKI-LAB.GOV for PKI-LAB.GOV/DNSKEY
	Received 2340 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2340 bytes) ;; HEADER SECTION ;; id = 6927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAb0H/iGnlg4bQDUFkLsM0yWV3CtYDL9vi3i0hELi8pKD3sHaRNGGcky3pwlEipoVUr0KoojR QRFyc1HGPKpEeL4wS9w3ZDeNhmUMHJjKKdxabwv4RM/GrS0nnq4e6ypTtDIoQ1kvswwkC1PAzYUJ XH2z8En8Jxkh06IJ/87Hba2WuOYaZFZcfILSEQY5KShYVehpSI65+xmYPF4T+QO5ifxn6HzufNUb NseK5k4ROddAHeB3jjjx63tR+nVppnj+yG4HdWib100WTTxKvX4OzIqnzXnc3L9jGft/hPcZ8P+k ZKXDCWLkpfrRBY+JXaB/5Z7QxVhuzPnM715QcZ93bfk= ) ; Key ID = 9153 PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZ82k3mE9amm47M6N95cuju3HwJ4f4CV7eQ/ivKHSmi3sTKAv6KS4aP4cnKt4tRKdQAvCNky kH1dp3UB128t/d+zcL5kXDK9UDVTCFjR7T6Edfcf3q/bAoLgK1pMC6Nj+uUkJXj5HzxLLJmX2X5s Ofxh2IDzgR21jKA/oh3WQi+RjZFLiWuP3Ql+Gl0/sG8g40xwMC8EoWIXr1dPzXbQKzSJr92vJRSs CcOaQbXl6Wl3qfkPrfJ0Fv8lFJBeZK7ooVH34kWnxvUI8+6er6DOjwkr6gpOQaHADQTiQplWeqqJ Nx9BBD4OTI7wlTLV+VdzYyXwzxu0FFpP5tl+zo5lY3U= ) ; Key ID = 64755 PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb06s2CPiry/ngu32leCgZfEcUxTWJ4YVLca9jOQD81nzJI0uR7/5IaPrataWaLcsuQTL15j YYduzZkg+gy5sxBa2L3Np9ysqfkvTkUaphihgIX+fGH9fRvTkXcNkGhxaXN4O8OqZzqdYY9+eiwy fGezVvpuon0/EdOnTvAe3KZFCqziPnDPhPemgHa+CV94qqcLG5ZLVIIVXOcbMUPKekfBqbQCtJuz hHpsmG8yyzomi63Zk/bvBFunoKn7CYHhF0wFbVhaVwb85qwF7RsPvectVCxzjri1HeSwa111iMjH I3gIe1VWd8MrnJL3VQzjx+7PIt1h149FkiJBoPB4DMs= ) ; Key ID = 56245 PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAd94htz2UFJMcd5BrO/wWvU3vzbWjUre2O439QfsicNp5LwVXIiwNVwY28c/6tC6nT7rNLY9 327wZLXjxr1a/Vk8CjhaSEyafVlmwJl5jwiioXgLxNRa1h3Pn4P6CLmmHNA8f79EuI9TRRDNr5aU K7QHICusTn5k+FZN91SGz4flRfbtgGaY0EHa6JEGI3WatD3UnwbDevmgJAzzyfLHbRP9iqB4JYqJ Y+A/jLuier/CVPIc42tn3JY15kxKalwVhYYMy9+JR2W7UFjyKMpmXxXhd1aPGGH4G6MBMY0dQSbW PiYtEyITPEffU8n5jtel2O80e/U7mjNNtHVwR9z5egs= ) ; Key ID = 38524 PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190702002510 20190625002510 9153 pki-lab.gov. klyvtCJhkwgKm9gj192Fdi2da5HDbGt5zfXR6U1Vq/4CQb8y3k3xKHpjqthkgTuE8bzgZ5XvVxcA +Mbj1oNN3d4WlAhmDhAcV+jCzTxVNLRTzlsUHN8iYrDBt5MNyVv3hT/ra+bvPOJgsNDKQSruKTUV hsl/ePO/Y3t2HmBjYO98rNymeAzzbwXaRhNJOEKnHDUYuXinvjW4uygctia8L36sCfP8BBFpFe0a fAE+5EEjBU/Z17yv3I7JRu4qwClPtC9pdjTR4uf4I8tv1svl3E0o+4Ru96cayFPyax5I6FCW8UPF +B/qwMVIHMDFB+R62nHbSPRb3KMQwXUT1IjYHQ== ) PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190702002510 20190625002510 64755 pki-lab.gov. aVDpq8PB23zpPE3wuQkuo78QLiQ24SS9njxeHVRjYyOrlY6L0h1C6bCoYbhDbvQLwYHv3iVlZ0+j FoAeOnuteoDq1gu9H669P5vFk9x7fztta0WAMOO9vXfGV3cYhqXOWmk3SHV+Q0CP8bh/Rd0x3GQ2 xAOw36KiabSsfX0flQkztyr0WsdQY6al9osc438h4cOUV6PSjpDsNEWlvc1vwbzQsrvDo962hgWu Si76ROPz3tiOBooD8I6oHVxclEWHe4csyhTMm8ffP9WfZPs/FUME0E1++DlGoUiffiOM+vq7KLfS qPvOWeSG5oGgwiy8/3+9Bpe8lw0rrp/fhSNryA== ) PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190702002510 20190625002510 56245 pki-lab.gov. SxYmIXTPMWBB7O6Us28PeOzc9BLinVUuaNdA9tw8LyBW3mu+Qb3NtjiWeEfi6HH9fyYoUOjqbAnf J3qrUzlNcuHkP+Nzc9LCLm+OVTbFhdB73b5a4CcK7GMDEkYD9G3MaxW1liQ5mRlrQOCSlmGH2bWV vpNZF6bl6J83qwbmx2eOF4bamTudPZfLoGZHiPkr9KClEXWmVhn1N9zLhCea1UMjDZvJief9Dq3k SZT8WdYcej/J+DE6gbLr6vsahKgYzZXqrAx0XhjyovypF04csgq4brKI342TCc+Y3sH8L0WwxBHx uI7evCzpP9BiYHow2UX6btaTi7RsrQCEpdUpCA== ) PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190702002510 20190625002510 38524 pki-lab.gov. GQtcDZFjM+21GKcKMxY+JqBhWqPa0Ssq730tmz+W29xHvWZo5SRqnJsrl6T04MCEPcS554WZUXt9 l8qLYKnfK3nLdRjkl5Me+LKHnlhY1qDzM14N3R8GmRICZ6Fy/qgFisfdLxJ2RdhI5R8nitJ41TGS J1JTgtXkGoi8C3EvgbuxjJPVuZjIXbzYeLJGEoPhaOhf3cr/9yFXxwnWYsb6TCQ2Owd2qy+qn19I VAGlk6Pwgfx8HPH2zyzCePydVFoYPLa83vwscDeNG4v7E3/353Z1voqaedgvayBn1ovtd03VuL5P gz4BsUfdyp5YVBc8ceUiWbOwa1byk2AOpExQ0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for PKI-LAB.GOV
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAb0H/iGnlg4bQDUFkLsM0yWV3CtYDL9vi3i0hELi8pKD3sHaRNGGcky3pwlEipoVUr0KoojR QRFyc1HGPKpEeL4wS9w3ZDeNhmUMHJjKKdxabwv4RM/GrS0nnq4e6ypTtDIoQ1kvswwkC1PAzYUJ XH2z8En8Jxkh06IJ/87Hba2WuOYaZFZcfILSEQY5KShYVehpSI65+xmYPF4T+QO5ifxn6HzufNUb NseK5k4ROddAHeB3jjjx63tR+nVppnj+yG4HdWib100WTTxKvX4OzIqnzXnc3L9jGft/hPcZ8P+k ZKXDCWLkpfrRBY+JXaB/5Z7QxVhuzPnM715QcZ93bfk= ) ; Key ID = 9153`
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZ82k3mE9amm47M6N95cuju3HwJ4f4CV7eQ/ivKHSmi3sTKAv6KS4aP4cnKt4tRKdQAvCNky kH1dp3UB128t/d+zcL5kXDK9UDVTCFjR7T6Edfcf3q/bAoLgK1pMC6Nj+uUkJXj5HzxLLJmX2X5s Ofxh2IDzgR21jKA/oh3WQi+RjZFLiWuP3Ql+Gl0/sG8g40xwMC8EoWIXr1dPzXbQKzSJr92vJRSs CcOaQbXl6Wl3qfkPrfJ0Fv8lFJBeZK7ooVH34kWnxvUI8+6er6DOjwkr6gpOQaHADQTiQplWeqqJ Nx9BBD4OTI7wlTLV+VdzYyXwzxu0FFpP5tl+zo5lY3U= ) ; Key ID = 64755`
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb06s2CPiry/ngu32leCgZfEcUxTWJ4YVLca9jOQD81nzJI0uR7/5IaPrataWaLcsuQTL15j YYduzZkg+gy5sxBa2L3Np9ysqfkvTkUaphihgIX+fGH9fRvTkXcNkGhxaXN4O8OqZzqdYY9+eiwy fGezVvpuon0/EdOnTvAe3KZFCqziPnDPhPemgHa+CV94qqcLG5ZLVIIVXOcbMUPKekfBqbQCtJuz hHpsmG8yyzomi63Zk/bvBFunoKn7CYHhF0wFbVhaVwb85qwF7RsPvectVCxzjri1HeSwa111iMjH I3gIe1VWd8MrnJL3VQzjx+7PIt1h149FkiJBoPB4DMs= ) ; Key ID = 56245`
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAd94htz2UFJMcd5BrO/wWvU3vzbWjUre2O439QfsicNp5LwVXIiwNVwY28c/6tC6nT7rNLY9 327wZLXjxr1a/Vk8CjhaSEyafVlmwJl5jwiioXgLxNRa1h3Pn4P6CLmmHNA8f79EuI9TRRDNr5aU K7QHICusTn5k+FZN91SGz4flRfbtgGaY0EHa6JEGI3WatD3UnwbDevmgJAzzyfLHbRP9iqB4JYqJ Y+A/jLuier/CVPIc42tn3JY15kxKalwVhYYMy9+JR2W7UFjyKMpmXxXhd1aPGGH4G6MBMY0dQSbW PiYtEyITPEffU8n5jtel2O80e/U7mjNNtHVwR9z5egs= ) ; Key ID = 38524`
	DNSKEY=56245/SEP is now in the chain-of-trust
	DS=56245/SHA-256 verifies DNSKEY=56245/SEP
	DS=56245/SHA-1 verifies DNSKEY=56245/SEP
	DNSKEY=38524/SEP is now in the chain-of-trust
	DS=38524/SHA-256 verifies DNSKEY=38524/SEP
	DS=38524/SHA-1 verifies DNSKEY=38524/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190702002510 20190625002510 9153 pki-lab.gov. klyvtCJhkwgKm9gj192Fdi2da5HDbGt5zfXR6U1Vq/4CQb8y3k3xKHpjqthkgTuE8bzgZ5XvVxcA +Mbj1oNN3d4WlAhmDhAcV+jCzTxVNLRTzlsUHN8iYrDBt5MNyVv3hT/ra+bvPOJgsNDKQSruKTUV hsl/ePO/Y3t2HmBjYO98rNymeAzzbwXaRhNJOEKnHDUYuXinvjW4uygctia8L36sCfP8BBFpFe0a fAE+5EEjBU/Z17yv3I7JRu4qwClPtC9pdjTR4uf4I8tv1svl3E0o+4Ru96cayFPyax5I6FCW8UPF +B/qwMVIHMDFB+R62nHbSPRb3KMQwXUT1IjYHQ== )`
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190702002510 20190625002510 64755 pki-lab.gov. aVDpq8PB23zpPE3wuQkuo78QLiQ24SS9njxeHVRjYyOrlY6L0h1C6bCoYbhDbvQLwYHv3iVlZ0+j FoAeOnuteoDq1gu9H669P5vFk9x7fztta0WAMOO9vXfGV3cYhqXOWmk3SHV+Q0CP8bh/Rd0x3GQ2 xAOw36KiabSsfX0flQkztyr0WsdQY6al9osc438h4cOUV6PSjpDsNEWlvc1vwbzQsrvDo962hgWu Si76ROPz3tiOBooD8I6oHVxclEWHe4csyhTMm8ffP9WfZPs/FUME0E1++DlGoUiffiOM+vq7KLfS qPvOWeSG5oGgwiy8/3+9Bpe8lw0rrp/fhSNryA== )`
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190702002510 20190625002510 56245 pki-lab.gov. SxYmIXTPMWBB7O6Us28PeOzc9BLinVUuaNdA9tw8LyBW3mu+Qb3NtjiWeEfi6HH9fyYoUOjqbAnf J3qrUzlNcuHkP+Nzc9LCLm+OVTbFhdB73b5a4CcK7GMDEkYD9G3MaxW1liQ5mRlrQOCSlmGH2bWV vpNZF6bl6J83qwbmx2eOF4bamTudPZfLoGZHiPkr9KClEXWmVhn1N9zLhCea1UMjDZvJief9Dq3k SZT8WdYcej/J+DE6gbLr6vsahKgYzZXqrAx0XhjyovypF04csgq4brKI342TCc+Y3sH8L0WwxBHx uI7evCzpP9BiYHow2UX6btaTi7RsrQCEpdUpCA== )`
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190702002510 20190625002510 38524 pki-lab.gov. GQtcDZFjM+21GKcKMxY+JqBhWqPa0Ssq730tmz+W29xHvWZo5SRqnJsrl6T04MCEPcS554WZUXt9 l8qLYKnfK3nLdRjkl5Me+LKHnlhY1qDzM14N3R8GmRICZ6Fy/qgFisfdLxJ2RdhI5R8nitJ41TGS J1JTgtXkGoi8C3EvgbuxjJPVuZjIXbzYeLJGEoPhaOhf3cr/9yFXxwnWYsb6TCQ2Owd2qy+qn19I VAGlk6Pwgfx8HPH2zyzCePydVFoYPLa83vwscDeNG4v7E3/353Z1voqaedgvayBn1ovtd03VuL5P gz4BsUfdyp5YVBc8ceUiWbOwa1byk2AOpExQ0Q== )`
	RRSIG=9153 and DNSKEY=9153 verifies the DNSKEY RRset
	RRSIG=64755 and DNSKEY=64755 verifies the DNSKEY RRset
	RRSIG=56245 and DNSKEY=56245/SEP verifies the DNSKEY RRset
	RRSIG=38524 and DNSKEY=38524/SEP verifies the DNSKEY RRset
	DNSKEY=9153 is now in the chain-of-trust
	DNSKEY=64755 is now in the chain-of-trust
	Query to dns2.PKI-LAB.GOV for PKI-LAB.GOV/A
	Received 1376 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1376 bytes) ;; HEADER SECTION ;; id = 50413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701002930 20190624002930 9153 pki-lab.gov. Z0CU8fBxB+cxwr9B8W8gcD1BI/YJ6bBNRNHpTedUPvG006Fne/shIH/0yihb4cdTTSRpywn25V0X Dg1xaQx3+J5jIDsabnYw6SEoFs4pAhYmHUWydg1JivTR8kcrrToPdt2KQnCIXHg9HxhYjOd8Ovhl 7NWjrija9dimuWqpAS+3gg4cuqAYFyKwMWnA2QRSOwpAlVKePyQlf+1Pkw7ccvpMeE5hNI6xa4Q6 54gazye2CnyqG++0SOyS1GSLU3VEdBRt+cmdN2box1X2gOOkyjf7QPc4HmaAEqvYU6AvOvmTDqU3 cCpcRkSZXjB4ELCmdvHIEscY/wb0+B0uljpG7Q== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701191225 20190624191225 64755 pki-lab.gov. R/X5qzo4ZLqhr5Tg7FqHr3glYuW627BvR4tBdAMXcDnb3MIO+tlDDGLm/fMqJZ5AdY49bHgq0wUq JIVB7iDAjnrSJEen1IOn1UmtOTbMNC5Uf6s8R3sLAC9P6iFTVDq4XNM3JcRL8cJJAY5y9EJCPDW8 jgwR7ZTR/pocRsjfMXBpoYLVcdQBHtRTtR+3dFcjN/6XconRtvj2J2D0aDE2JGKzcgjcx83q1PWT MziHuDclXpYDC0nwLRwWjqtfMZ6qq1Oe/KSNlfed5apR0lBEDJMgVsPDLwod0kgJNt18H0yCpSv4 4tfY89XkqBkOrflLkrMUw5f6QoJ+8zQZe7LLYQ== ) urr07ohlj8fps2k197f0gdbele3q4b0v.PKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 3f402668b5f8366d urr07ohlj8fps2k197f0gdbele3q4b10 NS SOA RRSIG DNSKEY NSEC3PARAM ) urr07ohlj8fps2k197f0gdbele3q4b0v.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190701080926 20190624080926 9153 pki-lab.gov. erclVmtCJvaZc5U3YG69w2ZOCknmGv3+bapVfd3my7XRzTrLQzhKXmAX/kDKtcMKZyTH76SKXdev Y9ylXPssvp4ZQfqgQ6Y9RCoFQ7L+wR9aVickjPbOO2x+c84C9waREIyPlyO24Ku3D0WjQYu7tH3u q8FeFQhpj2efaQ8aulKbp1GZ5/ZGP0Y+xWVnPHRi/09kUPf9CIgdsZ8/KeHLMG/gNlqbWwvlDa7y KubX1vMLrr4xqehbHqXqXhegqKiPOTqvcNOAflKl17Hh/vb3zit15+xf3waaGX+ezUcRSDMXKCyG SbmpPl+BqI1lzOfiWR3/J0pzlrjVXLDX84gRWg== ) urr07ohlj8fps2k197f0gdbele3q4b0v.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190702013433 20190625013433 64755 pki-lab.gov. WQ6GvxK55db5RDyLot1ELYQmyfiQ5yBQPaYIGwIvMW7zF5LF6NQQQM2NVEbvcjkVNgqEPtc4pS+e HHPvKRnqXTEuDcxspoywGiA5x6966RtjS06P7+8iYGwZcYE3fFI0CFOTiwXEATcCiiSzo3HtVhM9 R0SXt1emDY7DZgpmXYWxBawlEGGP/7HzLsJITOC6a0GALwQnNoqz69t8t23CltaN5FzB5zb2e2y9 XXfEvTCLQI1xPjEkHiRIcze9gqHfxGU43V0i5xLIz05rOAjF2ardcONMatBV8bggu/nng96tI9n6 tG6LcL2nRtPiQgxoXqcTGoXLywJvHnWvY7UKtQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PKI-LAB.GOV is authoritative for PKI-LAB.GOV
	Found RRSIG signed by pki-lab.gov zone
	Query to dns1.PKI-LAB.GOV for PKI-LAB.GOV/SOA
	Received 3801 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3801 bytes) ;; HEADER SECTION ;; id = 14088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190630235728 20190623235728 9153 pki-lab.gov. DJ/70KCSq5mZNJYsFRC2HVf2mlyPipvLkv5iaBWIxkGZkIIhPBaWBv4DWbbK5PjSF/OFBbZcmfSW 4qE3TWDeZEM4Nngd+ZWnIdkf+LJotUpK1nLQUQF06vqiuHU/7Fra4cdK8YJrBLSUU5DjUZNtwFop 1pVWHxmZ7+/KKFodR4k8nPvTQK0AP5fR9Wwbrny5Y4y+1aVwxdR/6s3jKPCom8lhoslU81VTWcxD ISw8KBS3SdPEuVfkU0EMaubOdATB3FzYfPu+jwJJPi/kMHTSlOZ32hypA6b7wexP8aQIj7ktrbLj sYVpUbyl7f7WD8di1ywQ1Jsqil0LxM7Ze8iWtQ== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701202521 20190624202521 64755 pki-lab.gov. EK6a0nJCCcZkIQIaEvfspblRXQCXVMIeQkPzA2HSOKz8pwAzCL7uqmoO+/e/Q9hrlLvpNbjnkTfY Jp+Q4mYYxHmKldcn5kml/nd6ahK9Qu7yroTjbokexiOsgKzQQgi/cU9pcdKOBJZRml/Yjg811wTu mnUecxfa+ha3pfQDEVuT2Jma5xnqhmdqPlPX4IFhQVRK4hCFef5PFkE0/EwDR49yChKalyz/5REB oWp7tzJW0AG287e/i2Z7RNy9NsC7ClLVnGjioQk8pltx7VVp6bdSvuvBG3VUB2sQCfY2xeTLlfgE IhXc8QqiKMDYZqayS0LHaifTJrAtcVRY3iBT1A== ) ;; AUTHORITY SECTION (4 records) PKI-LAB.GOV. 500 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190701013421 20190624013421 9153 pki-lab.gov. CODv7+HebZ6pzz+8BHx8s6r6AB58sHCV1RC96xs3yiIeFIknsX3FWCr07G9oyxdP6dtyx/jjyXA2 oznUdG1RXahfA+YohiUdPt5jpP1BWWOqfqL71kwR4R82UgeREhvOQeijNXkO9Wwqx/Mq8Ehj82uu 8cknMlyutuz1lFMiP15uQJm8zLPVgd/tvOJ5AN2s3GKqmhF6VBvkyrgxsjtdE0Si5aK+1vGrryn8 s8D/8rM5OeXDQRlR+ntM3l1anSWIkyydoBVLnFUeLKQ9dxe4j+5jsD3GgB19SmV3cXrLh02cVRVl PkLrN2zuEQsp8szSOgecpbnam40h1NnoiHVDXA== ) PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190702000814 20190625000814 64755 pki-lab.gov. VGREFk7XkH96S49PwdMZjuAIb0uB9J4pg+n4XhPmxYpAPT8pA1iMS5NGwuM6wsCsQT9J2Zgq5bAK DB/TAWiMxdvIdHI6c9QdzpstLrLHK+WRc3DVYTtCutuKrRenBXQUGcj4xacEXIoQth+H6d4BJjTx cQNzKtDxv6o/8kzynK/6T9rtg7rXyDiYIqTDUVR1+rA/Woh9jdE1q1TuGRCCHOD/Q9SDv+OygT8E GU4RTize9O+CfZ8uOONAcc6In2xFKfn77idORWm4IYniredVem9e3tMGz3MiRVVXkxLw2VIRnERk c8SPTzJmGWAJztp1sQ2Dr4fo1ylxPcluQ53S7g== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701013421 20190624013421 9153 pki-lab.gov. ueTtwDnmcKdx50bc1uryWgARne2q6GeJ2W2hHxw66+GHM6QEO0Gw3DW3//lOskinDT0PMonUKElY nmd+BpndZSH37nb8TuWIKURPFCPF1WpTCrcMR+uD2FNIPDCGuwEfSpWJACzsTobXsS77Wb4MMYDR DRJVodoIqL8vqHkY6Apo0ZLqZGWWb2VX1oBtAf2L7SWViCdbhWXPtA6zARYMnTw3tbwc6iPDEGtH cjmLWAhsoXDRwHONgpCmH25JaVmcOTQABuPAp6odsHAWobscNO++Xm7du6wW9etL+OF9/2i3Rv5d ZUTkDnrnFjPuHNU3j7Dd3HdQ8YaVAcgKdSdeTg== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190702000814 20190625000814 64755 pki-lab.gov. FskPUIlBVWqL1+y0Nqigfs5S+GZuFsuhOS8Kg7MKxSebUUW1l0Mr4rl6H52faMTfyWtyshLatY1z dhBSwf0zTkyJeK9jKUeYJ8PeBIikkGItUm1mAeFfNswsZArmAGfVYNdjAIkCASA16OeEJDp8v6Qv V0Kxm7urlc0NytgxhC62onRT2KcNeF0Dj9ecT+FbMUNwy1ieKrEa1slVamxgKZBqozKwFzjaCblJ tp/i0tKR/7VgZZGxdO8sAh7/rOxif6IWpetgQ0JapMxytu465NLfDbJSL65bngevt6dk0iybH0vy WB/zVdHXN9k45NVSwtKtORdfHZjF4XGOxOOXGw== ) dns2.PKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701013421 20190624013421 9153 pki-lab.gov. rpnYRYHnMJ92jjRBgpdVenvTe9LGmq4Ea4F5avSYzrDHOzWdz2NU1j7KHSosasJrGB90QFUnhygn U6LOfyV9tO/uHWw81VqhBBLz4FGj0scdG5lWdvgwFXBifO5e7+jJRCnPI4mcejvgLEWKVdXOu3rp K4bd9yMBgA6et3SrLQ4eSRzSEF+epj8jixqvpxVJjhaV9YoAvtQFmAxWtPy2WLD30skzhq3H/XVZ k4uOuvbTdLEMov9BY4gJCbY6Ce4SZW3qLOO63IVMtFISIXRbO3s5c8nPv2cuG55eZn77tVcoDx5V J45dYSrz4wB166QC0tQjo0GD0ZPcvQ4SbqaOPA== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190702000814 20190625000814 64755 pki-lab.gov. OeXapJI0l0gWAcB32oqU3KAHPA+1G/OiHfdBeuo1KU4AZuvseYYTAAzrNV6ZaQYwxEndlVu0Ll7E MgmyQdW/iBTdX46scpTnnRATNOZi2uD7lmgioKsw4CEvHrxFr4YS79sNogGaWTSKSHXwhccdkDc/ C9+8qT40IPqAnf2p7FV/mr7UBHG/zukDcmoSpwbnLr1RpOdGT9Gx6o/1H0ilMpVaxe1M1orIJegI 1dADzXZCnro+eBfHjb876BCQMBKCgAKfspI71VEzC4m3MMK9Y7tDxCcGHrEPEKXwVhN3UAcu6pTK bUVBh5u/Rwo4OPc/JWFL5naMNI7pWOsetdxkyw== ) dns1.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701013421 20190624013421 9153 pki-lab.gov. a3CHQwkrcpIosIKCvXZlyxNFtEsLaq9QFgJQdEdGpECnuScrJgaX0Rn+DSgzU29x7cC4wfRTeTsf iFrXkuR8qC/y2xFQYjrCqa+7aB90YLc+cuo2SI7fKfMsn3dDaK5mBAZdTncvYWQN2P6GZ9LYxKX5 tIDeKoGLSH4E1gUDCFc0Ue4z6BHl9kZTDE2M8bLaBttjV/MVgLlYL/5Yoi+waOtGn2vn8p8inQO8 boX7xGn8pZc90zpnsJyt+tTL1UiB1JmmpDltJHD8Vp4y09qqCFw7KgP4xa0+lbaF7BgG310wnApd 6KikHjvIWVXZYxWDjleL85MSvOmYoOmwVBvvMg== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190702000814 20190625000814 64755 pki-lab.gov. k5YeMxFWOZcHIBAHfjKuw+QnrIlTIlqkgW4DudN71tUU+M+Y1ZBHauMTkgNx1svXWISw52gS6/x2 o1YgCbsLKontt7JNf9Jw8zJlOGdgChGXzOuJznNdGC9ElfJ7fcVfCm3m2uzZH3v5T28PrySvyxeV mg8aBd+VhSw2P39yT9DNAJwKxZTOBbileB2CggPjYqNjwE5PT+w8+5xI2xNBZ4uoy+cvheBH6RaK JeTvLG7S0LhqkAiA2e+9KmdEogJrx3i8i4F0ojKIAefxXpKKqQcR9Zc058j5xA0qK0S0v5sba7wS 1QX018Wdo5vJ+yURhijWcb2xK2eLaixe/IpDBQ== ) dns2.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701013421 20190624013421 9153 pki-lab.gov. hC4R/tuSuRF8eR8W4Le2lTKQ0WwHGGgkdKFgXcKBTG9P/Y4/XKmfYQKp6UExtLZqvY6MjexPTmOB Vac6cfy2PFHHhI1XsoHVpTx88MqKMEQ+6gFwRinTEaiaoG48DVN4JUB29WwkElacDTGZq0NFVw7g 1QEXdbCXXIkPhHSNksvoVVEJlkJ/I9cctNo99qrzGd9hbtCF71UbKpTD2UBustro7EBCeUQ1lmxW 4vzit5/jHzOQC8r3faH9l1yywVbxIxU9Ad8QYhfA6WknUzw7eHjQHaluS+ab9RbrBoKtic3l6idP xF9KkGd/64TOIrAcWeVFaSarESssmll5ntgyBw== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190702000814 20190625000814 64755 pki-lab.gov. WXtFgihcU64vDRCcoYGHjQQqKUtgW3DZD+vrFN+mUTMH+WuJ8wQPFrh9TFYjYPdVgg1zejt2chZd pB4SOIp7bK6Z+aozQPOqWPgU7bYUC7HAVR1UbPoAmEo4SJeF3g5a8Hz06a/L44TbwyCPRyqy+j+0 sFWtKGjb/16172yT9cc1B/H3HLHaje7BMQxDQKCcuJMtQiPlW2AXqikiyRyUYbH/txnCTw3MB/BM 3rQZPGyu7k4yf2QPMcIkuvKUnuevCBZMWCYD0peTSkFkwixzqHcs6pOuk1EvwoCEcMq8BDljfC7v IT7PHJscYE/djt2lPLTcJLlHS8D/oCXt7oMUlQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.PKI-LAB.GOV for PKI-LAB.GOV/SOA
	Error querying dns2.PKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for PKI-LAB.GOV/SOA: 'IPv6 transport disabled'
	Received 3801 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3801 bytes) ;; HEADER SECTION ;; id = 6276 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701002930 20190624002930 9153 pki-lab.gov. Z0CU8fBxB+cxwr9B8W8gcD1BI/YJ6bBNRNHpTedUPvG006Fne/shIH/0yihb4cdTTSRpywn25V0X Dg1xaQx3+J5jIDsabnYw6SEoFs4pAhYmHUWydg1JivTR8kcrrToPdt2KQnCIXHg9HxhYjOd8Ovhl 7NWjrija9dimuWqpAS+3gg4cuqAYFyKwMWnA2QRSOwpAlVKePyQlf+1Pkw7ccvpMeE5hNI6xa4Q6 54gazye2CnyqG++0SOyS1GSLU3VEdBRt+cmdN2box1X2gOOkyjf7QPc4HmaAEqvYU6AvOvmTDqU3 cCpcRkSZXjB4ELCmdvHIEscY/wb0+B0uljpG7Q== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701191225 20190624191225 64755 pki-lab.gov. R/X5qzo4ZLqhr5Tg7FqHr3glYuW627BvR4tBdAMXcDnb3MIO+tlDDGLm/fMqJZ5AdY49bHgq0wUq JIVB7iDAjnrSJEen1IOn1UmtOTbMNC5Uf6s8R3sLAC9P6iFTVDq4XNM3JcRL8cJJAY5y9EJCPDW8 jgwR7ZTR/pocRsjfMXBpoYLVcdQBHtRTtR+3dFcjN/6XconRtvj2J2D0aDE2JGKzcgjcx83q1PWT MziHuDclXpYDC0nwLRwWjqtfMZ6qq1Oe/KSNlfed5apR0lBEDJMgVsPDLwod0kgJNt18H0yCpSv4 4tfY89XkqBkOrflLkrMUw5f6QoJ+8zQZe7LLYQ== ) ;; AUTHORITY SECTION (4 records) PKI-LAB.GOV. 500 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190701004406 20190624004406 9153 pki-lab.gov. QFwso9UD2+hDKSFhu1ojjzjrONEo4pukW1/oBy+AtmoGqwJmGIA84GZUQbhlOZd+Vj92MYWXb1po U8arS0iJ72H87eaE4YaLEHk0inU+s7sEcz9prDt8CcuU3bR0u5TBAAcbhNvrF0UZ7b2eUMd+Pei0 9veBZkXwW5WLUJECCe9Thr5omWm1tMf3jMik+4AcC0Qha01OnP7Gtq16PwCafNkcfslF4HO880Om qfmq90myLO9dZ93StAvo220+TKid+oorEbuLKJ+CRG4hf1XebcjtkTuKIf8xPIFL+YSblG4HNYlV zNaykmEidHn2BdJ27geqfy4/rFwTV+2fZGrp4g== ) PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190701213849 20190624213849 64755 pki-lab.gov. gyrUqfn9DBw3DnLekopswXuXF4VN+ERusymuG6MrDd4g/vuwpGdTfvYXeZ5N9KWRliB1oqxOoIGj g7LZIyw5HtI5PGr1Gjw1PLcfVScu7NtdTk4WQ5X72OJSuLoRbbU91AU/B02YqUfBFmYgXreXzrTU 1TTUFgazDGhejra3pPPwTPZ0ZOdns0Rx7aaTVkVCjTqfjrsBlkluk1niyNjFhPMcLewRNKCwdHHk Q4xIE2HLaq3SNW20e1OaCa0F15L19LkdsXk0VMmn5JFeRPse8Cl9Mq5nEhfnlr+JTU8PbH62lHkA SIuRHh9ciKQKF5+IPs33y0zWypMuWkt5tzJ9AQ== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701004406 20190624004406 9153 pki-lab.gov. U0rvz/tIMwoQSA70Ks8dsnF7UNTrVIQcYah/vzZ+jR6tQZjalRRfHkI5J38dRsGqijg99YXunpcR LCUztw3g7Fk+i8/E3mxHaNCDNAWdnKve8/JA3QvccN22+N9ZG9YEgg7nN30ePcJ0LvaOrWrroThl xJNUDXZ7JUYM30dweEKQtNLCuV0pkC9OuSbxW7V/Sg4N0Dl4qLgdeZmLorxl7Re2S5s7GyrRHK3E /IO/xVUiJSU4Ff1BsFfb/2hxvpY1pfr5WH1S/if0g2ryYJPQkzKVkstOafV/w9SgmZGqIsPMPogr YRpKquXkL3apB6uD6o6vRH67AiIWLmRuSuIR3w== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701213849 20190624213849 64755 pki-lab.gov. Q0CifZEPUkP67jU3YQZsix8gDz/6RL/vj6F8qXP2yZ7pimwlRDvSvTuXu2NerjJAqNz4phd7d/rQ DM6VIB/QDOSrC5qMxtlGfXgZvglNWrD+ge2cZQqNisu3eekwJpvltRcZfsJOZrhI3y8TMsKDjGS6 Q9ZATswyXr6F0DRavzcrEzjr08ve8JvMB3Lcj1Vgb9Hp1ULQftzS1/xVl+XTmjYTXGWn3NZr1WGe ZkPYCD85csS2JSQK2cH7Pel37j0EwJ57twen1ik5UNaI46yrP8sMFIu/MBxUfSWIp1Y0qEo0cvKQ qHxyN2i3cOWHLKlvT9uDkDHONguFYdH3yV6mzg== ) dns2.PKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701004406 20190624004406 9153 pki-lab.gov. roL1kjCIYcdekNQYymewMkJmNNBcqIIpejfAlPoQ/4T2bg070EMInTRne1D7awZjZBpW0AdkVyaM y5bQUUYiWM33//5GNxTgWUIF03ZR0Rp/pM6aDOtpyCGXGAo6Dx8awVErbH56aKWhcT3FlGDQgVl5 xwgfAOfDhEGcApQ7fLOmpktbofzbXSS2vRSwifEot1Q8EXIu5i/h4JMOnHYxPzkSa/1AX46s75af DT1FGnoUqZQx1A9PTJKLB7t/5hQsrAAdrODJ/Tj7v6gRZ0sowLxWxGw+rzjaCxmWig9/gP6WB4pR 9hXXFx8xXY7zrcZmyDNt5//C+a6MOct3kDVMAw== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701213849 20190624213849 64755 pki-lab.gov. XsISVEJvS4iwXHgmKEJKqDgmtWVY3GzJuDBaHsSPe8R3oBPoLZNyIdjZ6ik2ZLxn6h0YgwJzIkDA tnbw5ksCsJQu0af0apRkzOT33Qrf4vixMuA/emkgNG0Yf7j+nkmgEX+pfwGH9MLSS3w9exTEkKlo NO9S9zDcmqh4Ht316dCvOZuIolMTRgiczG2c9Qi9HjTzAZIbORFJanX00fHRRyYnHHYpO+Km79L7 iUob4GTkXLFzH7S2IKOfNBYh/A8VSoTikMjKxKmkerMEyuHrv2hDSLJ+GaLx05tbkqBGRj7CkGGb RS0ibyz6f3fBCBffjhhYnha9yUA1rcTW5ZSj+A== ) dns1.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701004406 20190624004406 9153 pki-lab.gov. BMoWoZpnrVLVz9z9aPMnN94HRE8F6ZA3J+2gB2L88CRbPhiVBAJDvQLTteg79oePUV7TJmWT2Wgy p5Vv1v4/cnPrI6JZUEXScH2MCIegHx3PXh2zwe3wTGz+UA2J7BjvMglbhIDncXqAkzYeFgPzuv6c WiAbOeGfrFpFNllRYT27oHq8qVRnUqhOF0iW7vbooyaNtj7BQXSmG8caKvPJD6zv9Ryg2l+dL9/z B3A3K3w8ELAy3NQKjnKEuYoc3TBz1F6MSH9AYwij30pjYvR4A/g8rQN7zzVcKEWaIFkPCU6z8TTk Mg98HgdR7e8jx4TMjCdjOo+4q3DLt10rVPh/xQ== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701213849 20190624213849 64755 pki-lab.gov. G3zHXUR3SJwShgGrtHLz4dEUeErXmZF6jQOrIATKTOPoOdrqJrsVObzx+u3rH7JKutyC25k8csoX rdD/w4UOOim5ylCFJhKPe+A4Ba44uSKFP1+qb5TBDw78UzzPL22YWZ5IjJEmBHNqxuWSPxWjILfr a/bpCXl/a6Z3Re41yVxaJE53T4WEbEAAF0BeR6fVa7J3Z8/ZyAiNWkfI2WO2fdXA0O+smDDEaqh+ UQOtRYz5x+o74fwvnLbJg0Udvlh2jBUhrjlVB1+ztwG1d5UzBUQfvPIxoNgdXaMN9Q5NZM/4IZpV VKxXK1c5PhYD45QGA66P2HBYLVq7MrJCmM994A== ) dns2.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701004406 20190624004406 9153 pki-lab.gov. UjZvjIreJ34imXvGFDBsJKw/UKb1WEDxLSc/TpZMyiby9x9VsAdjDEwRgpVsHjxm9W3phgXI8a5o rLFxBwMhHnQ1UQ+ZBxsEG1DPuASFuwAyPHKY/5/UsWhYr6WbUCrRB01SIpAFM5f2ITISAiqt4K9f 8FLTUFDQsgp6NGAuwEUwjsllqIEUvb0s4BYwZUzV1dhO3+6mAAz6ZPYMJuTkt1Wkiwh0jP1J9sB4 igLpflpVZMDw4t0ISFhqCfl3a0Vckl07VgD9lsp8tv3sIhk9bO5KpzURea3F4UAwEb90t+TlrDMM lH6xWQWPwtoJsEvndPq1ed4Z417RXZVBXxiMLg== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701213849 20190624213849 64755 pki-lab.gov. krjeT9wO0HudTaupYVKf4RhvcBKimlJUGGuoFkWp1ODxnN0lEWpRqQS53IMJnmkZsoNjhw0l1BNE KTamaKvlYke871BSyFH36aSAKZaKYZGpzUL0kNZMi7SImtUCtnOQppRF8bBWebZcZ4MrNrS6fda/ zAp4X/FzeyVgrDLNzB515+P7j+Vfpgg4ofkOxaN9exeprT+LBIPvsxaSKo9mUanlOywgLn6riMnl m5ys2rp0xc19XbojjeNdtnplcjUHjIWU6p+lBvrasGvKw0GnpY128tQvcfwpydMZlWE+HRYAywbN no0wzPuuIrDcW7vh9zbSzHRSyzxWkmbldtbZdg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.PKI-LAB.GOV for PKI-LAB.GOV/A
	Received 1376 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1376 bytes) ;; HEADER SECTION ;; id = 2407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190630210609 20190623210609 9153 pki-lab.gov. Og/+kUsABBVf/31HUhUGr6X2skjispEL1WxgxYMMdaOsUm3qX05rGiN8Kk5mi10f4Pl6JpBrg2tO M5E8BNNGv5j3aqZlOjQw2itUPFTkMl5d1WrG9b+TMEY6RG0YGpxPdzmup/8gvWvgfBkGKa9Me/+O BvdxRXbEidIRZV0SsB8ExQvkNFgDB0Dc9VQS5opkDDORFZtlydRMZgUn+NY6gg7M08SeKGwqehIh kKxzY3ldoRGEXYn9Oa0HRJRv1zfwb6h+qEZqC4/OSPt80r8VyrbP3WJrFe3zqIJWRXpXxJMcRFjF IHcEihEIKuaVbZrPQc/vTza0KtntGx/G/bfVhw== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701202523 20190624202523 64755 pki-lab.gov. DeyX95aboDQpbzxobUqpQF9bMa6ifOzB7OClqtSXPaIvdBHv3MoxkVaAWaBqtn55iXp76D2+hADb Iehrq/avKr7vAWKFZks2/AjUV6gyYxrI+nxvjHRowV5ld1UV/24VbacGq83uqtROFzJjrZvt+0vC kyXJsfq1cV8Q64DXqgroX94KoQQtVrAWQiCNETsLyu7kBwWOVDtfzbtN+9UBWzyDovT3kGIYkNkM BvJ2rAif8iAhcwAn1T0jEikFgFirMi57hWqfnr085mp503XHTauaZ+bXDVh8GJfXZ6xttO/r0kZr kMdhBD7dH8h2DvinAKwEvSaYXH5/+YmUsjrSGw== ) fkhb58qvigfhvfmk6fatnrqfa5o8qb0o.PKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 abdfed165367866c fkhb58qvigfhvfmk6fatnrqfa5o8qb0p NS SOA RRSIG DNSKEY NSEC3PARAM ) fkhb58qvigfhvfmk6fatnrqfa5o8qb0o.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190701071502 20190624071502 9153 pki-lab.gov. GR6vW0/9VsQHSc6yfy4WqU9ouIntq3pJDLrDGJ3H2X5Nxyt0HnI6q4nhrVq9XIBLHBjGklmIf2Kz Na6H+lN8rHHITceND62qgrdi+X0YN46N8h0+qlGQ23ku4Y5jl+kA3CMzoydtL7Jafbxr7ihghuHg Bui0rqmCuCl14txfNydCUtITZH+L11paFsQFWWE9O0zy5u+Vxq3DMXAFjsHLQTPy9r5HPHRnfqTy JQHskDj2EvLiuO5otLIHxswOQM6zAoQGI7hhYB7kWkp5u9DnFLDJVWJY5HB1ykoYSh5hU/jtarGW 8Aas8mcX3qa5YVjO3kEQr6nQ1A+sp+RcmpXFTw== ) fkhb58qvigfhvfmk6fatnrqfa5o8qb0o.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190701220155 20190624220155 64755 pki-lab.gov. fcLYJU4iNtwm0N0D0qs7l4zAyhaLGs66h2oa9fnhclaRaG0Twt2W+xJbzj3PZLXrmcSF9WTTCjhP meGzmAPwIBX2Q2GZvJE8XTHLoPfgxQHlW147qc+farHWBDDRrbouOVg6xfX6eFJ0kb7vGwW1Myr/ d92C1X57isLRKjvKcN/lch+81qWe8UmFoLefYxVz9iSUPiyMQyPa1sGlJsrdBZpmsleJxIhQzRrf 1+ywkbjD0ZojXNF4+Kk4n4d5pCtJncb+us6AKjUGFocYThA/msBP7c+efnvH6VbML2VP4QKk9oHf +FdN4T22Q5ZHYP79iG65t/EindSFhZnAe4rt1g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701002930 20190624002930 9153 pki-lab.gov. Z0CU8fBxB+cxwr9B8W8gcD1BI/YJ6bBNRNHpTedUPvG006Fne/shIH/0yihb4cdTTSRpywn25V0X Dg1xaQx3+J5jIDsabnYw6SEoFs4pAhYmHUWydg1JivTR8kcrrToPdt2KQnCIXHg9HxhYjOd8Ovhl 7NWjrija9dimuWqpAS+3gg4cuqAYFyKwMWnA2QRSOwpAlVKePyQlf+1Pkw7ccvpMeE5hNI6xa4Q6 54gazye2CnyqG++0SOyS1GSLU3VEdBRt+cmdN2box1X2gOOkyjf7QPc4HmaAEqvYU6AvOvmTDqU3 cCpcRkSZXjB4ELCmdvHIEscY/wb0+B0uljpG7Q== )`
	`PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701191225 20190624191225 64755 pki-lab.gov. R/X5qzo4ZLqhr5Tg7FqHr3glYuW627BvR4tBdAMXcDnb3MIO+tlDDGLm/fMqJZ5AdY49bHgq0wUq JIVB7iDAjnrSJEen1IOn1UmtOTbMNC5Uf6s8R3sLAC9P6iFTVDq4XNM3JcRL8cJJAY5y9EJCPDW8 jgwR7ZTR/pocRsjfMXBpoYLVcdQBHtRTtR+3dFcjN/6XconRtvj2J2D0aDE2JGKzcgjcx83q1PWT MziHuDclXpYDC0nwLRwWjqtfMZ6qq1Oe/KSNlfed5apR0lBEDJMgVsPDLwod0kgJNt18H0yCpSv4 4tfY89XkqBkOrflLkrMUw5f6QoJ+8zQZe7LLYQ== )`
	RRSIG=9153 and DNSKEY=9153 verifies the SOA RRset
	RRSIG=64755 and DNSKEY=64755 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: