DNSSEC Analyzer - PKI-LAB.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-22 10:30:11 UTC, NTP stratum 4

Analyzing DNSSEC problems for PKI-LAB.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 58690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to m.root-servers.net for PKI-LAB.GOV/A
	Received 669 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (669 bytes) ;; HEADER SECTION ;; id = 6226 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (658 bytes) ;; HEADER SECTION ;; id = 45578 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 56428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (743 bytes) ;; HEADER SECTION ;; id = 13000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for PKI-LAB.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for PKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 497 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (497 bytes) ;; HEADER SECTION ;; id = 29340 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI-LAB.GOV. 86400 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 86400 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 3600 IN DS ( 38524 8 2 3f678b902f9bc0182b81bf4ab73fb53adf976d01b62feef40daccde78c6b3a27 ) PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 ) PKI-LAB.GOV. 3600 IN DS 38524 8 1 d63273b8a6016093785674ba6c028beb3b4a39bc PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5 PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. McjIejLk2aDal31/+rcWqXssuGmYsVxhzApkqtKn9hYF8lC2y8rPqGthzRTwOi/26VA7xgUHOzJX dCmL1SZ7QoUGTdPcb/sPNozi+PbSaJsjLj5sGG4EZszDclOt+DK5z/bj8t2RcrqvW/mEAiWOTiaR 6kK3Z10uboufmOANwuA= ) ;; ADDITIONAL SECTION (5 records) dns2.PKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.PKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for PKI-LAB.GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for PKI-LAB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 497 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (497 bytes) ;; HEADER SECTION ;; id = 45424 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI-LAB.GOV. 86400 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 86400 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 3600 IN DS ( 38524 8 2 3f678b902f9bc0182b81bf4ab73fb53adf976d01b62feef40daccde78c6b3a27 ) PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 ) PKI-LAB.GOV. 3600 IN DS 38524 8 1 d63273b8a6016093785674ba6c028beb3b4a39bc PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5 PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. McjIejLk2aDal31/+rcWqXssuGmYsVxhzApkqtKn9hYF8lC2y8rPqGthzRTwOi/26VA7xgUHOzJX dCmL1SZ7QoUGTdPcb/sPNozi+PbSaJsjLj5sGG4EZszDclOt+DK5z/bj8t2RcrqvW/mEAiWOTiaR 6kK3Z10uboufmOANwuA= ) ;; ADDITIONAL SECTION (5 records) dns2.PKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.PKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.PKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone PKI-LAB.GOV

PKI-LAB.GOV

	Checking DS between GOV and PKI-LAB.GOV
	Query to c.gov-servers.net for PKI-LAB.GOV/DS
	Received 371 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (371 bytes) ;; HEADER SECTION ;; id = 36727 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) PKI-LAB.GOV. 3600 IN DS 38524 8 1 d63273b8a6016093785674ba6c028beb3b4a39bc PKI-LAB.GOV. 3600 IN DS ( 38524 8 2 3f678b902f9bc0182b81bf4ab73fb53adf976d01b62feef40daccde78c6b3a27 ) PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5 PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 ) PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. McjIejLk2aDal31/+rcWqXssuGmYsVxhzApkqtKn9hYF8lC2y8rPqGthzRTwOi/26VA7xgUHOzJX dCmL1SZ7QoUGTdPcb/sPNozi+PbSaJsjLj5sGG4EZszDclOt+DK5z/bj8t2RcrqvW/mEAiWOTiaR 6kK3Z10uboufmOANwuA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for PKI-LAB.GOV in the GOV zone
	DS=38524/SHA-1 has algorithm RSASHA256
	DS=38524/SHA-256 has algorithm RSASHA256
	DS=56245/SHA-1 has algorithm RSASHA256
	DS=56245/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. McjIejLk2aDal31/+rcWqXssuGmYsVxhzApkqtKn9hYF8lC2y8rPqGthzRTwOi/26VA7xgUHOzJX dCmL1SZ7QoUGTdPcb/sPNozi+PbSaJsjLj5sGG4EZszDclOt+DK5z/bj8t2RcrqvW/mEAiWOTiaR 6kK3Z10uboufmOANwuA= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=38524/SHA-1 is now in the chain-of-trust
	DS=56245/SHA-1 is now in the chain-of-trust
	`PKI-LAB.GOV. 3600 IN DS 38524 8 1 d63273b8a6016093785674ba6c028beb3b4a39bc`
	`PKI-LAB.GOV. 3600 IN DS ( 38524 8 2 3f678b902f9bc0182b81bf4ab73fb53adf976d01b62feef40daccde78c6b3a27 )`
	`PKI-LAB.GOV. 3600 IN DS 56245 8 1 e90013227e6f4df3a64a2f97d6313752b0ed12e5`
	`PKI-LAB.GOV. 3600 IN DS ( 56245 8 2 ffc0e46ca503f051f50da804c0c0cdc15ed8c559e99c2bb7e3e65f785db89718 )`
	Query to dns2.PKI-LAB.GOV for PKI-LAB.GOV/DNSKEY
	Error querying dns2.PKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for PKI-LAB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2340 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2340 bytes) ;; HEADER SECTION ;; id = 59898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcnUs/kQzpbrI2K8n6H9czy42FlpL6l91jnMYZaZUauQLZ5QkEAq+WAhwFKADNdYFCTG182n WMer6pyE3OmTLul/7Kpih1Me/xR//gsPsPo+GiKVGUl+qOPFILbRMp6MGKyfpd9BYuCBAeO/E9Qp Y394sb0TofsxW5bIWYXgDGAZ2f8MjhmbHfs10nw3OdqK0QCV52g3ixunOaiLa5eZl/g0AE/U1bOB MuVB5XjSE77PtYiR6JouICWOVVRZgNMxRV/+lX6blU4gKVWL29pl3lGxd+4MqJGx1CrXcZ00MQ6t oojSmQmsgNRuv7/q5DMKgwtnE+8MrhqsvwN6Qtzf+Cs= ) ; Key ID = 57396 PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaLTuwSeM4V8mO/r8OBHtKW+KEYh/ckLambU5cGr3vFlqteatm+mC3jsExiA8+MZ4RBm3Nsp FDf2saSlazyNZgovH/fNPe6R9/ggqz18lqSbJnRN+RDu8Kh6+oJvwytnHQLysHaP3itvb+V0pTbE sU+L+0uAKe3R/GEHByhV7MESw8cOfrZSjQNEqRAmr0jcHiVDXgbL/MBKCjMro6m4QbaFGhakXaEK R/JIPKrlE/Bvvh2YFwAR1Yy45r5ZykXavXd8MlSHkfVC9vVxv2fOJNQEYJbqLMkqDvNeRi3hbDmL vMWqprePQW4WnZFSXf+Ynq435PxwkmMGn0h4G8KgW0U= ) ; Key ID = 4170 PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb06s2CPiry/ngu32leCgZfEcUxTWJ4YVLca9jOQD81nzJI0uR7/5IaPrataWaLcsuQTL15j YYduzZkg+gy5sxBa2L3Np9ysqfkvTkUaphihgIX+fGH9fRvTkXcNkGhxaXN4O8OqZzqdYY9+eiwy fGezVvpuon0/EdOnTvAe3KZFCqziPnDPhPemgHa+CV94qqcLG5ZLVIIVXOcbMUPKekfBqbQCtJuz hHpsmG8yyzomi63Zk/bvBFunoKn7CYHhF0wFbVhaVwb85qwF7RsPvectVCxzjri1HeSwa111iMjH I3gIe1VWd8MrnJL3VQzjx+7PIt1h149FkiJBoPB4DMs= ) ; Key ID = 56245 PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAd94htz2UFJMcd5BrO/wWvU3vzbWjUre2O439QfsicNp5LwVXIiwNVwY28c/6tC6nT7rNLY9 327wZLXjxr1a/Vk8CjhaSEyafVlmwJl5jwiioXgLxNRa1h3Pn4P6CLmmHNA8f79EuI9TRRDNr5aU K7QHICusTn5k+FZN91SGz4flRfbtgGaY0EHa6JEGI3WatD3UnwbDevmgJAzzyfLHbRP9iqB4JYqJ Y+A/jLuier/CVPIc42tn3JY15kxKalwVhYYMy9+JR2W7UFjyKMpmXxXhd1aPGGH4G6MBMY0dQSbW PiYtEyITPEffU8n5jtel2O80e/U7mjNNtHVwR9z5egs= ) ; Key ID = 38524 PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428080855 20190421080855 57396 pki-lab.gov. fTfhbP43NMi7tbrGX+g/I90FJYjkKClNpQlzP1EH/RAnJXi7QIYpmVrpfPfNnCviXAiK0tOXe04/ DnqWNLtQYHOlrRCtPYNtKglQBgC9e2mrzaTJ4CjR0/qHHacRILmEDKyi1hWr33sVDIVkFe9ijDGP 9lHcTG2f4ls9mubTDT6pqWxrwhoPAhwqebCkQCcoXitZk1tAn4aBLIuM9FnzoMOFwdOFLfUOEIhk T1naWpdfX5fIQQQdLCzVsDQmCfmqKQughXqqtzF4Cft+DchXpyMRKTupmdXjJ+AoZngGKqM6rkv5 JyYkYcDXxwzEiUJZaZb1NHdVPvooATzjnDUpxA== ) PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428080855 20190421080855 4170 pki-lab.gov. Zn3iSkC+73Pm7PXoOo0AoOAjlZQz1jI2/K/RywB1VkrmoHlIY9kCsdY4K02GY8UTqrW4g03qw1mz oictI3U4Dv6qChmx3iMYzjgtvn44Iw2bbF4+X2UEjvtTXjSHFHf5EUF7qkAgxvWtQmlsq1Uhq8+x Jn039IAnchZ+43Msi/uZCERHgB2kAMB2+srZhNbc92fYj5VPOgp8TIk7m+RR2J2NXjFqNGUiZtBk wljwo5IQbO3lk6vGU+MdWh8OLCQstSHMgNdMX7Ugb8hi+4o3Qh9G08qxvkZtQ0Gb8VD7jngqmLE7 A/lzTw8hULDwGPD3uEem02osqWnAAgbR87u2qw== ) PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428080855 20190421080855 56245 pki-lab.gov. jUXj5QKbrrQ3zTe6s/74wodYFIw47JUAAZTi5ogGoJ36arjNPuqhijECmLvTxbuwXxcNvRcEClET m7Ax1soubYA5p12jdees/kNCK+1lN63B6MXqQtHDHWB4/TqQmRbDRRiHR8yniLMTetdkS1K86xEq uAiIusLvr4u7IyFCmHXgFPPj2GiMr0TKiAmuQtQha+uVs3vRWqx0HBq9qjVMVzv2+OsjPDZvp9Ps ialeujWCqw5xqBBUk8NBvNiUhVY2fqspwzxVLxL6yIJ29kX9yLxUobFR7QyITrqcvqQVdmRbnuHX L8d8QeBSBHx/tuy7lmx+WtJKns2Vb0DRUgpDUQ== ) PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428080855 20190421080855 38524 pki-lab.gov. j1MHk844aXbKxC9s66crtTck5KwDhnxA0HXB/slkzI2bHE6yfbOpy21vGndjV0CWnrK9LE4zKsDQ c1GAP80UtAmrUuOKynYdIa9ZOB4ggsz5ymDE9fWRpQH5TOCqvaHl5XK+5T/rsZAy6BdmrttyDTYQ yJWuuVSJx+f9E70Wwb6Dkcrfbq5/ruPh32wNsOkp1NuhpxW5Sx3BBC0yDhQj4Ap1yqrg4kEIRzE3 Wwp+TGPKzKFhQ2no9X1dzLB9xUlF/Iw7f8VhFcDdWoyTRxsuXfOIR2atjY5dvJe4WHB1ailWbL+Y 71OGmYeQ+s3g90tK21Tm8sD4sJT5P4lwRUxTiQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for PKI-LAB.GOV
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcnUs/kQzpbrI2K8n6H9czy42FlpL6l91jnMYZaZUauQLZ5QkEAq+WAhwFKADNdYFCTG182n WMer6pyE3OmTLul/7Kpih1Me/xR//gsPsPo+GiKVGUl+qOPFILbRMp6MGKyfpd9BYuCBAeO/E9Qp Y394sb0TofsxW5bIWYXgDGAZ2f8MjhmbHfs10nw3OdqK0QCV52g3ixunOaiLa5eZl/g0AE/U1bOB MuVB5XjSE77PtYiR6JouICWOVVRZgNMxRV/+lX6blU4gKVWL29pl3lGxd+4MqJGx1CrXcZ00MQ6t oojSmQmsgNRuv7/q5DMKgwtnE+8MrhqsvwN6Qtzf+Cs= ) ; Key ID = 57396`
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaLTuwSeM4V8mO/r8OBHtKW+KEYh/ckLambU5cGr3vFlqteatm+mC3jsExiA8+MZ4RBm3Nsp FDf2saSlazyNZgovH/fNPe6R9/ggqz18lqSbJnRN+RDu8Kh6+oJvwytnHQLysHaP3itvb+V0pTbE sU+L+0uAKe3R/GEHByhV7MESw8cOfrZSjQNEqRAmr0jcHiVDXgbL/MBKCjMro6m4QbaFGhakXaEK R/JIPKrlE/Bvvh2YFwAR1Yy45r5ZykXavXd8MlSHkfVC9vVxv2fOJNQEYJbqLMkqDvNeRi3hbDmL vMWqprePQW4WnZFSXf+Ynq435PxwkmMGn0h4G8KgW0U= ) ; Key ID = 4170`
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb06s2CPiry/ngu32leCgZfEcUxTWJ4YVLca9jOQD81nzJI0uR7/5IaPrataWaLcsuQTL15j YYduzZkg+gy5sxBa2L3Np9ysqfkvTkUaphihgIX+fGH9fRvTkXcNkGhxaXN4O8OqZzqdYY9+eiwy fGezVvpuon0/EdOnTvAe3KZFCqziPnDPhPemgHa+CV94qqcLG5ZLVIIVXOcbMUPKekfBqbQCtJuz hHpsmG8yyzomi63Zk/bvBFunoKn7CYHhF0wFbVhaVwb85qwF7RsPvectVCxzjri1HeSwa111iMjH I3gIe1VWd8MrnJL3VQzjx+7PIt1h149FkiJBoPB4DMs= ) ; Key ID = 56245`
	`PKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAd94htz2UFJMcd5BrO/wWvU3vzbWjUre2O439QfsicNp5LwVXIiwNVwY28c/6tC6nT7rNLY9 327wZLXjxr1a/Vk8CjhaSEyafVlmwJl5jwiioXgLxNRa1h3Pn4P6CLmmHNA8f79EuI9TRRDNr5aU K7QHICusTn5k+FZN91SGz4flRfbtgGaY0EHa6JEGI3WatD3UnwbDevmgJAzzyfLHbRP9iqB4JYqJ Y+A/jLuier/CVPIc42tn3JY15kxKalwVhYYMy9+JR2W7UFjyKMpmXxXhd1aPGGH4G6MBMY0dQSbW PiYtEyITPEffU8n5jtel2O80e/U7mjNNtHVwR9z5egs= ) ; Key ID = 38524`
	DNSKEY=56245/SEP is now in the chain-of-trust
	DS=56245/SHA-1 verifies DNSKEY=56245/SEP
	DS=56245/SHA-256 verifies DNSKEY=56245/SEP
	DNSKEY=38524/SEP is now in the chain-of-trust
	DS=38524/SHA-1 verifies DNSKEY=38524/SEP
	DS=38524/SHA-256 verifies DNSKEY=38524/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428080855 20190421080855 57396 pki-lab.gov. fTfhbP43NMi7tbrGX+g/I90FJYjkKClNpQlzP1EH/RAnJXi7QIYpmVrpfPfNnCviXAiK0tOXe04/ DnqWNLtQYHOlrRCtPYNtKglQBgC9e2mrzaTJ4CjR0/qHHacRILmEDKyi1hWr33sVDIVkFe9ijDGP 9lHcTG2f4ls9mubTDT6pqWxrwhoPAhwqebCkQCcoXitZk1tAn4aBLIuM9FnzoMOFwdOFLfUOEIhk T1naWpdfX5fIQQQdLCzVsDQmCfmqKQughXqqtzF4Cft+DchXpyMRKTupmdXjJ+AoZngGKqM6rkv5 JyYkYcDXxwzEiUJZaZb1NHdVPvooATzjnDUpxA== )`
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428080855 20190421080855 4170 pki-lab.gov. Zn3iSkC+73Pm7PXoOo0AoOAjlZQz1jI2/K/RywB1VkrmoHlIY9kCsdY4K02GY8UTqrW4g03qw1mz oictI3U4Dv6qChmx3iMYzjgtvn44Iw2bbF4+X2UEjvtTXjSHFHf5EUF7qkAgxvWtQmlsq1Uhq8+x Jn039IAnchZ+43Msi/uZCERHgB2kAMB2+srZhNbc92fYj5VPOgp8TIk7m+RR2J2NXjFqNGUiZtBk wljwo5IQbO3lk6vGU+MdWh8OLCQstSHMgNdMX7Ugb8hi+4o3Qh9G08qxvkZtQ0Gb8VD7jngqmLE7 A/lzTw8hULDwGPD3uEem02osqWnAAgbR87u2qw== )`
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428080855 20190421080855 56245 pki-lab.gov. jUXj5QKbrrQ3zTe6s/74wodYFIw47JUAAZTi5ogGoJ36arjNPuqhijECmLvTxbuwXxcNvRcEClET m7Ax1soubYA5p12jdees/kNCK+1lN63B6MXqQtHDHWB4/TqQmRbDRRiHR8yniLMTetdkS1K86xEq uAiIusLvr4u7IyFCmHXgFPPj2GiMr0TKiAmuQtQha+uVs3vRWqx0HBq9qjVMVzv2+OsjPDZvp9Ps ialeujWCqw5xqBBUk8NBvNiUhVY2fqspwzxVLxL6yIJ29kX9yLxUobFR7QyITrqcvqQVdmRbnuHX L8d8QeBSBHx/tuy7lmx+WtJKns2Vb0DRUgpDUQ== )`
	`PKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428080855 20190421080855 38524 pki-lab.gov. j1MHk844aXbKxC9s66crtTck5KwDhnxA0HXB/slkzI2bHE6yfbOpy21vGndjV0CWnrK9LE4zKsDQ c1GAP80UtAmrUuOKynYdIa9ZOB4ggsz5ymDE9fWRpQH5TOCqvaHl5XK+5T/rsZAy6BdmrttyDTYQ yJWuuVSJx+f9E70Wwb6Dkcrfbq5/ruPh32wNsOkp1NuhpxW5Sx3BBC0yDhQj4Ap1yqrg4kEIRzE3 Wwp+TGPKzKFhQ2no9X1dzLB9xUlF/Iw7f8VhFcDdWoyTRxsuXfOIR2atjY5dvJe4WHB1ailWbL+Y 71OGmYeQ+s3g90tK21Tm8sD4sJT5P4lwRUxTiQ== )`
	RRSIG=57396 and DNSKEY=57396 verifies the DNSKEY RRset
	RRSIG=4170 and DNSKEY=4170 verifies the DNSKEY RRset
	RRSIG=56245 and DNSKEY=56245/SEP verifies the DNSKEY RRset
	RRSIG=38524 and DNSKEY=38524/SEP verifies the DNSKEY RRset
	DNSKEY=57396 is now in the chain-of-trust
	DNSKEY=4170 is now in the chain-of-trust
	Query to dns1.PKI-LAB.GOV for PKI-LAB.GOV/A
	Error querying dns1.PKI-LAB.GOV/2620:9b:c000:9200:12:0:0:30 for PKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1376 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1376 bytes) ;; HEADER SECTION ;; id = 14410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428033143 20190421033143 57396 pki-lab.gov. pXn9AZJvk93NVYvyPPcN8sdk9Vsy3QmJWUa6zyMk5aIWrLwlDsZL8pCiqiyDD8ynuuQ0V5mCHkH5 vZboZLeaxCfONUBfSn9BRkG4I3vrxwA1pWlQXXLj0TJfowyTpie7PnxR6CefS4f9WSpDDA0gnAkK FZ8q4c9FKlx+iAu5YheIoCymDN4lunInIi/2VXK9Hhy5g+TkKN8XjmUZqIGn+oisoKSMq3RyjGBG +lfODXLIo7Q/Rr7Kdq+DXOJWPUmpmSTeJ9UccPv7iWke4Tj5YoxBZlKUS3rCIPvIAnqocnT4lrZ6 6MQMHC8KbKrWSMAEOQOCgxJqWS4Ua82UFo4BQw== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428142917 20190421142917 4170 pki-lab.gov. UUhwLUTzy4fjNJoKoyBp6oD/pB9kFZmTpa5uXRB6bAGLPj9or3ZlHNfQQmXFyZnY6dONMOwJu4KM tiAUIqUrcsuX5vmK6GRKydH/RmF4A16MX9fN+Uky3104LWNrIDzNovxfHlGs+2+LOhbF4FDZaoSD 3PNLCpXETvFhJj9uHau48rQkR9dFPXx9fXLNF0S4krjYggKU8W3l7b4YFyp3eSLNl2BMn9eVoxAu I3Md3jQo/VYbDnjtgbpVYFDYz1bZacQT7WhFz2MASjh384khrU78QGHY+VIc014OkZcyNvuveaek ppoL0ZEeUFf5xKH0hzBOOQFMTLQKXpGc72BCMg== ) huj2lt55p07eo6k29d7igcc07fou1ff0.PKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 1d36372fe55679c5 huj2lt55p07eo6k29d7igcc07fou1ff1 NS SOA RRSIG DNSKEY NSEC3PARAM ) huj2lt55p07eo6k29d7igcc07fou1ff0.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190428142917 20190421142917 57396 pki-lab.gov. QCoCOco51Op/z5Py7Wc7kiXbyh7mFEkWXm8FP9EWYc63hwCp6HY7D1qtzPDkG9KrWkZksVX+lwPO EAFLHPOixNOVS+OiUxvsRo8CUF3ZRQNL4VyhFxRkdFKeq3SWkWbKy7kzc+nKlWZHj2ylvlYXq8dW RQnf9wHmqWdiYDGB64NMO3QW4hViQqdFfQrrpAMvaiGFmeItcVQSA1/q4aTx03avllLXK/66J2z5 3sFECUILw76zcQ4R9orNVveIfmXYc+xKnSLlQAIreQQNW7ixX933MelBkDGOQ8eH3D/8hHVxLlxp k9UqW4amOH7njXh5sS5Uy9qmxETSJ6iFg7srBw== ) huj2lt55p07eo6k29d7igcc07fou1ff0.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190428142917 20190421142917 4170 pki-lab.gov. m8AMYcB96rAEGJo59BlfU60t4si+w6xPBETflnBIc9TRt08XpY/xAFGug+kOMgK2Sb83dyODakUY oxAJdGIPPuupRrQtGODd5AFB6vllN7RwXEdojeYeIw96w9ugO9x/n7w3ccOSbHKD+eCcmlXEt7bT +ZVYURZETk/iDhkxtwVwwiLKFiz7Q0RuYzZi5dhTWko3yPnxYcE8J2vwe9ua9GvOnZUk2ww7c0om qxVdJkgD1oTqNmfarCIB1ZiuZi1hojl0OuLRdm64K2oVGXm0atE8fnAk/MjrKbKRPgzGbYMPnynt 5nkzUaJZZB+a00d4QDKAS5LpVwp2GH7o/+ZCaw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PKI-LAB.GOV is authoritative for PKI-LAB.GOV
	Found RRSIG signed by pki-lab.gov zone
	Query to dns1.PKI-LAB.GOV for PKI-LAB.GOV/SOA
	Received 3801 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3801 bytes) ;; HEADER SECTION ;; id = 12663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428073159 20190421073159 57396 pki-lab.gov. oILspOJbDKc+XfZrAKSeKn2TIo3m9YSw+XPkp3vOYWBScNpk3P50VXW3ATt7WXHgLjGzLVUuTIr6 glujLhpzg3XJ+y7/XI62chfdZrWCtaje3sJZeYMP4wUxiL3hXHJj+pZY3hEEZZYr25QQOR2dfLKG wXjNn8GseawPd77U4GcWOpgu8A26rlsWO9IMmArit38lbNaxdbKDGxwx/RsIAgxA9KFKD2gbXFQL ixuJecWDSwrdIMxzfa8rMd/NqK6wMLjHkUyoohATetLbPeQTqCuCcg2zrxHkHSjDBMYhASA7i6uF LuEKeT6A7lnVfZMJt+EVbRSW6jZxkHCcldUvsQ== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428073159 20190421073159 4170 pki-lab.gov. dBWdop+Ivo8GV2VNBPf2F1RVfkt1nSl6XSC/lDcuVhI4WhCcsdV638ygONePxj1OQwMHe4EPi/vv 93dbjCyay+W0Z343ihcCMuqRQaVGzp8Rn6ktF8QW+EO2xL1yl2mu0BJo6n3m/C8lLfSScf39v1IF Q9Tklmj0Y6Sw9F+jsiTDRTviq1ViaJkr1AyPY+XFeAnDrOKRHGIp1gRg4QAIAWixQaxGa0WXajwC ibjaGCJKWRfo4wT8O1F/O0+sZTJe+AzYe71bSWOnNdGG2jgwiL0+LEnMh2jOi/j8bnuM0NKx8sAa 4JlY4Ym5sTwdxPnyqw9YDmIp+sB9eFybddmz/w== ) ;; AUTHORITY SECTION (4 records) PKI-LAB.GOV. 500 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190428094547 20190421094547 57396 pki-lab.gov. rttc2MflqxZqPbCK3tQ80StlNSVs/rnQ4YhUgLkVQFDPd92f1ZiAF66ZdGZBvH39MQXhO4qMehrn QMXvqES8HUpxmBfsm6QpbEVwMSunlsB2uAcIdxIDGdOhUhWJ61Eq4qhoyixiELvsqOR9XgSZJQY5 I4XRT/Z2kjXTdz2wjZe32jsJn26DROyRmk0GdcxNgI++aigoOTUFsVyEzfoQkQ0HQ/00RUDBxS7G VMRb7xm627BhAMwCS4Elhy2POb7XD1BE2FaPFV8aKghTNmDLniVhee7X/wItP59DQDgicliEZAqg gowoT68vwOXQ5WIpLgsK0YHu/DemjbVk8sayyQ== ) PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190428094547 20190421094547 4170 pki-lab.gov. JQhkfMbitiWH9ptlVUWmMQp56LCaUq34wcPk5RTIs/hli+nPq9baSqmQefxFIZMGTntTvQvVpdwy TlPw9pQj4akgyJVWHFs6cvVG0HpGiThiMCHlG/OOb3Aco6c0wsZ1blW66ty1LqdJtQT26zbplfqP xeQ4uechnxZTHcuNWoZ2/dtnoADLtCifyfM8oKz8Te2pRtScp63EdXmQDI+/k0x7vxLR2jqsky57 5hmw8dC9w1a7sOqThk3v087q9zV36PLJFKHTtkrbpNm7ooVcYNX8WrBTw9cddwq6ih7WHs4GpkxC RAW2iXoAc0mbVGlDvlsG5MuRraCtnkt1FDHQxQ== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190428094547 20190421094547 57396 pki-lab.gov. cJ/dm2Ufche9xNQfckYXGvhyB/PTf1MU8lvydmuwfX2bOynItTHpQyQS2YWMh5RVG5eW2YshLBct 0dSlhimwhgmO8U4fvQIBdkjjs91ZsunCF+grZ73IQTQvdnklKUFcr01FOv0YGDAAyDdIc+CGMI31 FN14xXtqda9RQh7j8gjXPeFaUeOgup5wij7sxowGLasJX+uVL3twktBXak739bO27BggvPS4+/Xb v+ptIObz3BPlem4GoNloq4LGsZ8QSjJ8jn//r78+S2fGaqSNJ3Qf7UrR2+M90OxjPNtDEzOlhyot n6GTBR7x3dIMMYwTXWXpK73dFZBbxj8j4hu4wA== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190428094547 20190421094547 4170 pki-lab.gov. Z7Y1AxMljWnDqbn9HYx6dzNMeyHaXBC084yPoFB0b/q4ElkAIVCneM8NbhflEXk52p2Q3C8JKGl5 rG5JyuUwLhEVF12tNaMkG23/vapJOw1d3lpzDPajSNPJSlfg5Fu/XKBgM86smU8gJzO6QSVKGZRO EFhBOEZ+V5FmaUl+lpr4gcXWZ9RWVcGtgM1D0nUNnJM27cyORYz1JryaJYSNVHauohVITrFcr4j3 xEJxZWX8qg/8PY04H/Z10mh9ODOGsVPnGaZuSlnJAilBoYL8lyx6uv/4nvioXTVngibk7oznFYI1 DVrqv4DXovMcR9CNQ/XA0fffwsfQL3zTOPAnog== ) dns2.PKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190428094547 20190421094547 57396 pki-lab.gov. L9RNsr7tj2weKnysjfkngwVRHL5fETOQlkHdi2iIE+CriAG5PJS3eFbkuKiRITjGRsmnus1buMOU Vcnt1WXL+36kmIza/galHQVuCCJrboQFaWVxWiCfL1wIDGljVmSWil7JcEp1g/Z6i/eZ9k9yO6+m DB6LvFJHzYb0P20ZwSjFZssEqU9tlemunxCp6epX2rPIFYIHB5x6+lgP9cUgq0kn/wiaQ+zwv0/g uk2z4xLIXvwqpRNQ2R4TSU225DEtdq1OfAPV7VXsNYX4JjR93gyZgUMAdXc9QJgSe01zmCggwBzJ kOB24dPTgHjtIVtuix2Lxxs95KHmobW74RUiEw== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190428094547 20190421094547 4170 pki-lab.gov. I4rvGntE3IBQ4Bflj+kEi0IjOWPlKu0pr8GLIQcBwNXkXFPSecnbjXSiH8n5H/H8afHVVe4COe4e AE2SopLgWO284Pa3iEzUs8cA9ZXlb+Z+60FAy21kJHvZPJhVt0XKnWPhwdED+xWkeAPd/eOhx2D1 mS0VF8c6uumGJ0EMlQz3BV7Pk89rW/IUGjsANB510IJNpDC3Le55mkaiGvjDv+yz7/fpazztnGIr EOX1deipC3tJrxOHmNErTQVuXzh/2otPbGm9XIhO+Z0uhwwXMStb31mxM5DpMI2zxVuit4L50/im aOUq+dHI24BL9OkvIxKBF2IgD/L3wmSzLOo4Pg== ) dns1.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428094547 20190421094547 57396 pki-lab.gov. MM4S1eMEdgufFIGaDe9PcwR6iWEWkwue//zRwjGP/0SHmp11pH+NT3occrjl/VnWMl+SN9hrLBMQ so5V1BmgSGy6q48kVNR2+/oqr0PZ1TuwAMAFD7DHSLKvr/wCxICBxsSKc/oMl1c/bOihi1cp6Wjz BJS6MSoGovrgPSVxpVD0KYl5/qMmRJqE+qcJen23+V+awKZeHd4wfcBK01Sw3fBDXQ32HDpOqG53 c72FcYutOZJLyiaA6MJaRk3hRpGEcH+F2/tnTayhGWU9XjN9dLqeYzvRSVLrLekam7KdKZ6MNt5M MJ9dEp/Ba+S16FbeWW1EzoD9r3QV0WAHvLAVvg== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428094547 20190421094547 4170 pki-lab.gov. MLvopmZAl/4vMZkBlBV3ida70UbZZ4J55m9npo+jwNv2g19Ior45b9zTdSzOxiVW4CCaFoj5ZmoE ZzpUwAnVLZ35bOw2DqpnkWwqk04FUU2geuRwJe6axYNfpqK1wu6UugK/5J3VqP4bOXMcjK0UqAfH p5Nuw+O7ev8fgvGJJV7x3fq17w8vFLIe1tB9GRBs489CUBwADwkd8Ozv2gRg2Ka+5Hxn05GALqrm z/LVCAUoFShOfExkFNGlmK2W1KtD+Zf9xF4bjRKAH+Ii74XDILDv3L/6XqUGIzMado/807d+is+/ qvv0vpBMXfuRY70olfmmnfsb+G9dEHnFPkCaBQ== ) dns2.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428094547 20190421094547 57396 pki-lab.gov. FLoWk+iADr44UWmM2wgUnxBLGWP8DSJXnNtnMct5v5eNFUBzZBswjbIteooG4PMcB0AMjOFQkJgR 8fQ91XD8K0RJT1EHtk1gPYeTHBSP//pT9B90uw95JN2f5eVA4wJeaZNnETnI2Qz7RvnWdGOE23he 6LOCM43QPOEw4wvZ/+Macn1Ks08Qy3CQvmyhkSw44rWud399Ugz++QkxWAlAgwsXZADk1Q1cfzvL pGN5rttQbQ4Z+4LjBhHFdzXHuAoKZhMST58Vdj/y3WbsLRjLSfXJMmpjbqCUOEuEZsIEoIuTM5/F I+Yt8GyzsRur1k2Q4KB7pwIc4Bc+zIqtfzjpeA== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428094547 20190421094547 4170 pki-lab.gov. c2fJ3CSANsU5PcCPxq2tIqNY+RtKjeHx1U1A4M+ZaqpqxbgZiuvDfqSvdt66k0tiheZ8XyevROed kXMjrjUnieF57zVtCZW2EjpqqzBUClkPGtFShVdisdbPTITWYnCZihHZojjxqLJNapbqB8k6GQ/y 8hmywR7s59brT/7HVTQPrZz+Jmhsy1m4u/uS1d8/Yo/FoH2cvKBJIrCdXvyyjVcdqp68tSB1l4ts ZSEzlmAuEq3DIBuly06gLB1tBY8y3d/5w/KL9pfz1ww8F8iFXTm8aCyIBlZpSmXAhR1zXebj1Wnx nfYAt6D+938slF9zWsH+0jfFJd8X6L04Rn+7Cw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.PKI-LAB.GOV for PKI-LAB.GOV/SOA
	Received 3801 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3801 bytes) ;; HEADER SECTION ;; id = 6339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190427131429 20190420131429 57396 pki-lab.gov. noiTZOjYMTDEW7T4WTWQWCt+ryKDPkFTjfNimvpTisroFtIBJcC5ghpZiHnuMw1eVbJVSZh1DUbC s5jkt9+D+UznwMeaMPQ8K82OyQD0TKyH0kgmiPC58lla2DXZQazB8QtDvp96vMSjTbkUpGixll5F eEiI9UlvF2mW3nPLHXy0lJ2JCsCogPhMbuQeKxSIxWM5x110QzF1pku/p3lIn1nvlC5+LFKA57QZ FqyTlPMmIntqTCLOZtjQzqKDZhldoRxjtedl5U83ZZKHQ1PmK4OMn5vPHgYMcWXL6v6nNCQE78pj b8gIRuuEGU63pkDUWx1ET6fjawNtw3WQjgb0cA== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428091915 20190421091915 4170 pki-lab.gov. EW0WoPWREg/2FaEKf9MpZCmcwbX/VKbXJfeERESnlRMBCrh+yjKbGKUF3Dalb9SyNIqqcAJ/z9qy F0NOwDF4mWZuEklAQOuy9ojZAfSnjKuk5yV0G3HusinGuRBz3fyOrlA9iLSO0RrL7NqVxm15wNGQ Jo5564ekKKaGGnZ8OKVIIZMd5gUbmETYbhaanl6/LVkumzP7Rjrm9swNFC9B3QpK+UrFkczCk6HX 0A4GwJobr3JOaQR/yNeQjx8LK7qV43YXdUYO2RW34VsZ3m97gJ6LfYXUk2dAIqG2SGy2vQ3P6dhB mQdsIWxDY120VHzuaxb0of9YSmPB8J14qMx7hA== ) ;; AUTHORITY SECTION (4 records) PKI-LAB.GOV. 500 IN NS dns1.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN NS dns2.PKI-LAB.GOV. PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190427105704 20190420105704 57396 pki-lab.gov. KrvtFtFUHU/rROoYeCx/KmEwgjrAlCA9sE2UR02RfFzmOIt1z5DovQ33Bpnaq8dYmB25wtLvEzYC urkmHvv2tO37wkyIrXvRbCfdazucXTTXdiV9K+FtzkZN5qnVmYhFXQ6dgQFB4sDC32NfGHJ/MzCE q2hyCrFXcilxpFoZx6XLgx8Ip71+BH6/m4+olNf/FTkq4q4jycnLUVnBultar7m3h2JnUNRamMTx 8A57YRbVGqRmVOANtjzbW2Qa3nHGvOkJHZ/wh25Csit0V9S6nJUe5lfdDEEDycbXyF0XuDUciXJQ AkjP13ERtKgTKCokVljyEenSrTJ5miMEUNhffA== ) PKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190428112502 20190421112502 4170 pki-lab.gov. e6XM/iiyERwrefiKaPe+T4d6eY9cSWBOtszHCEO776cmSoqHbq7gUfNoiThlXT6A6ayA+Sh4E4fm tE+z3mIHEfcEHSwfvJWA1V92Ss2SQnmxvMPWR33FH0X59x+TXqFd6QIognf3H/GqtVY+iLNauwd9 Xzq4aAFKH8ZSq1dqqIVt26mBB8m7T+kk73lHQRnJKgo3liShFbMPi820LOWijVe557oX4rNnrS3E UzJDodDvSZhQq0mV8wO9NPq9oFG3w1dVB7ezI5OR2CTh99tHepbj45hQr3PrjHpMg9MQeEAOrzUa IM5/CqGfUZHPm9vU5gDtvjUF5oLvGfwwGkASHg== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190427105704 20190420105704 57396 pki-lab.gov. IsgqsKoUdxhQc6V+5nOykIR3vpt5Br0NguJnTr6EBz6bubsYNQQQBvJEgykL6eKcvcV2vmC6Qj0T SJ9/TEYwvvm7t99cRluMi+8mq46hvnDIcItxQClx+U2uhHpq+vZEJbbBR7NuhNdQgmjt+NGZtkOV gIPNSl3j8HlhINa5QwpF0+YnYSvxmNhaZLYjBvtDcbUpdVx457OlQpJwGcz2imIgHBpqkXJTgkkv FjTkkXWP/k1e2AgDZT+OST0Qk3EuOWl7+ifzjxVWoV/9343ddcgeH0UH0+G9KjN2TFZ7vooEdSm+ 7xN84wD1/vv5YWdY+rypUfEoP4iYP36Xkl5QeQ== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190428112502 20190421112502 4170 pki-lab.gov. dmgZZRNtncoRJIN5I3GrOhIkje6FqWj8Suwa64XsjO8YakOeg+z7bPUthLOqmBTQi0/j3syOooIc OXmDHqQOiGTYzxBYWAVDgQQ8YpZ1FMB0t2ZsXZV6ZoLNH80u47oHdq8yJHMkUhoifecAk3wiQvGf PG9dYquxXavT3sUpZ+0Kn8D8k1eE1Qg+X4fySkc2g89dkrDLVu/Lg2vObKX99lYunZqbOYXqYoQL 54jqHoSgU/imNgRdk1vUl1zyv5NfdSbu+3EnwAURWDiC4q4CVhwssHzLI0LX6Oqo3cE4N4Eg1LI7 jnt+QenYnq5/rapjMzPrg1M6pbz8w5+FhZdXBg== ) dns2.PKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190427105704 20190420105704 57396 pki-lab.gov. b+OGpa4+pGAZU9Ln+T1OEvIA0ZXLrjWgH6KwIwNu5MbC8RRyUflxxHSauPUL8F2IKMj0CB6P7xH+ a9gnwkS4ritn/YRHnkaxSE72VwI0bkGM/MBG/oovkiMGCjslUpUJvSDjD2+km6SzWdkBqkai64An c/Agin32jyU7YC7g6fWB3cole8wf6td0SaPlfW8gtnD3pjNa9Y3rZyPd6dPRQffWoeSBBJ6/faZ4 zmitgnH3d+ZiqbhLZlM6DsEq1GuaMMODMcBqRuyqtFMxN2XE6fuyS77n06Zbcus82nsDOCjG8wxf a1fc52J360+y0aaqZosm4nDnHkR1f5xjTkFDkg== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190428112502 20190421112502 4170 pki-lab.gov. XQXKngD8smxffABhKYvxI+rau7atWu8X1SVNSbho/JuID/U1NcTxzQ+5Anol6T/j5E7Kt7QxUtBB FFQbSqHA07ckV2eAdUsEeaSuJQmbSZN+ca+rcMc4T6ExprM/3gks40paWEF6totu1as3yDXDEBuD VQj7Lj1rlb1M66AT8bXB6YWfh5ECPV5r1/aC5lEzfLnHdjJZ6JfXrWjdDcEa/mURSrrV8wWS5tQy lAJCMSrkuCAlf/JJ/sD4DOcQXX4Ty4nLxZIm+uA80yZsyEeCNdRB9mbgfa+KlA3aa0GWf3D/oXTt 7rfzlZ+GvcU90AHDxr7QK7eQDjRPdSE/mBhB1w== ) dns1.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190427105704 20190420105704 57396 pki-lab.gov. jzCOrVN8yt10iDXvPzHqBXF5sZ4jAJo/wCwnA1eU1VHvwx8dBFEhvAzujtXHD9NjIYhrppVc9zle bblQxboRc8hrMhjmQ1o8+jHkMzDnlFgyRgMaijHqCwmEuiOcwbBomvN0mpDVwVAkKo5uCrlfVTDT DV5LOms2asPKr58Jg3i4R/67JGYCQWVZY7ZU5hs9ZRgkgaZnOBHCHnQ+NwVGf0WMzVNXygrbjt4k IZi4C+bnl/UuJxn5R0KtykYEb3inyQs+EY0DhXfFnP7+uyf8Zm9uKwh95g0wmF9G4CORGWTUJM0F VFyTU9/b6D2Ph22xH1t+njdRkt/P5/cT4/vKHw== ) dns1.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428112502 20190421112502 4170 pki-lab.gov. VrvLscCDDIO5ImExMR+nY8QIgsryGQw3IfkEbKa8dQdPWhHHXIU905Ao7H8ZOdeOTadgIGvSMFtV ZAHH+TScufvf6HNbx2j2y8XIOVk8cDGmSlpNUR1zFlexEMB6jRlF0qw45ARcpEsaG0g5R/xAq5gQ XwRVtJH32qHObpjj0VxSdxnzlusSlq+WBzSr1HtW/lb/Vimqhyv7jqsP9RNSw1zmqraLpTj6zo9j 8HTH6/03cbRukm3VY31TYW911agHY89dGtJ5dCrfEF1nRDFsQhTmXHhw0Wr2fu8UnBCqskL/FNDH 5hmwhMwTpMaBRvQ5lbhVgm0LHJK3yMK4xUpoiQ== ) dns2.PKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190427105704 20190420105704 57396 pki-lab.gov. sqxRjYxnGboCA3gFkBe4NaPdt1fgDPAY3HNiKCsEope3YXCsY5FbdnhcpCANpqU3zC8pEEwNl9R4 Xhy31jQ7xDmtMIArroGg0utdnma05R1eOMLL+/9rlucCXnljwJSnkHB5GI4HoNG35MPOynVTCkrq SewUNIvqdviV8qTuKArBA0XvK0yxeW6O0yWpUQBBk95LNUi3INcAHmbZT0C5mRDTbrHYV5d0um9g GEdE6PTKcH9f/CnPUPloRlGXyCV7FOaEmsPuou31sA/kSDw1o86Nm+ph261+tfCrJYgUMBNb/c/C Xi6vkJKimCNvkWC70GRQvG+uoS/PfjCIdgPhyw== ) dns2.PKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428112502 20190421112502 4170 pki-lab.gov. UfCRv2LY7jcVBgoAgeAqmAQtQ0Ou8jUPeFLYU+cBF4ZE0K9sv1RtG5gqsJi8VD8dW5/8mYJJhjw1 jXQuteA/Ai4Oy57lNT1lZJHAxvtUiEMBB/PF7mPyh16ojIUxov3ZIa3/8bgudteLrSuXts54k96/ +WztIhEWlujWy9yEMbCrBemg+QoWyBqKUqPGvTXjFsJCnziyZoUJX2mEXIsQSZ44rNKVz0ttv579 NEeB/7XM2uzPa3rEtcZTRB5fkx6LgJwJoVGKcSm9FnG0dAnBcaAIyRgltdCOF9EGCZMLdstDiEhq V8b/7Lk3KVm7FYXZKBFEkMebV4IJMR98jgQqVQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.PKI-LAB.GOV for PKI-LAB.GOV/A
	Received 1376 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1376 bytes) ;; HEADER SECTION ;; id = 34023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI-LAB.GOV. 500 IN SOA ( dns1.PKI-LAB.GOV. hostmaster.dns1.PKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428073159 20190421073159 57396 pki-lab.gov. oILspOJbDKc+XfZrAKSeKn2TIo3m9YSw+XPkp3vOYWBScNpk3P50VXW3ATt7WXHgLjGzLVUuTIr6 glujLhpzg3XJ+y7/XI62chfdZrWCtaje3sJZeYMP4wUxiL3hXHJj+pZY3hEEZZYr25QQOR2dfLKG wXjNn8GseawPd77U4GcWOpgu8A26rlsWO9IMmArit38lbNaxdbKDGxwx/RsIAgxA9KFKD2gbXFQL ixuJecWDSwrdIMxzfa8rMd/NqK6wMLjHkUyoohATetLbPeQTqCuCcg2zrxHkHSjDBMYhASA7i6uF LuEKeT6A7lnVfZMJt+EVbRSW6jZxkHCcldUvsQ== ) PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428073159 20190421073159 4170 pki-lab.gov. dBWdop+Ivo8GV2VNBPf2F1RVfkt1nSl6XSC/lDcuVhI4WhCcsdV638ygONePxj1OQwMHe4EPi/vv 93dbjCyay+W0Z343ihcCMuqRQaVGzp8Rn6ktF8QW+EO2xL1yl2mu0BJo6n3m/C8lLfSScf39v1IF Q9Tklmj0Y6Sw9F+jsiTDRTviq1ViaJkr1AyPY+XFeAnDrOKRHGIp1gRg4QAIAWixQaxGa0WXajwC ibjaGCJKWRfo4wT8O1F/O0+sZTJe+AzYe71bSWOnNdGG2jgwiL0+LEnMh2jOi/j8bnuM0NKx8sAa 4JlY4Ym5sTwdxPnyqw9YDmIp+sB9eFybddmz/w== ) s48ojsli79c730io5f60b2pn8tertnlr.PKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 0cde3f55c008ad26 s48ojsli79c730io5f60b2pn8tertnls NS SOA RRSIG DNSKEY NSEC3PARAM ) s48ojsli79c730io5f60b2pn8tertnlr.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190428073426 20190421073426 57396 pki-lab.gov. REyK8wcVRyTg2sjzULZev5+yDbGOASnDgPCDHuZSIQSSNWrymagjoZPizEHfEyN92IvldcqQl+no tMbgj1/779OUkY3egHX6IsWdLLdWAdtEbpIAgacigMRIhQTGl5O4UifLDGCV/MnxS70b1bmcauZS RUFaROLdUUcU4YNtjbJlAMHcNlb8pz2dY+r+RJNXY+kY9e+JAWWZY9aJbEVE2GMbJhFzRHXUwR2u 4xwQAXL0YLLWsLoDsmcRVViMAan+hitr/vdFCPxc9aFOA628+gCiW+DsaYKiQ45UUfWtuCoaGR6g LWWDdtNFOM4P/X1pzz64wOtFv3WyJFcjDD4nBQ== ) s48ojsli79c730io5f60b2pn8tertnlr.PKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190428073426 20190421073426 4170 pki-lab.gov. EyQEbO5ghyLr1TbUwOYnBjbNKtPNUr/sNauKvEtPu22t/6aemGtmLZUa45rOp+xTSZ+OL52paJAl 8M8lt9SHKGFK2xzjaqQJ6xe0t1jD0fpFaXqcCgHu1PE/t6DsTvPITGpaYlFqIj4ZEHErFTJ2IoqZ YJBqmxmHBzg7RmbwMdkdCwxk8vb8xr5Oz2jrIt/4Gx+/vvJckgNShOtQOAal41Kc2kl8okXOZr9Q mUKgZnUO5AXBeliZiWt4bMMH/oyAaUIilCxA2pwJn+7pbKbZCHbX7woONsrwpEjzqmA8j8RY9qsd tiCdj9HVlO5HjQ0/wXKakNKhQjbzEAy8ATFlnA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428033143 20190421033143 57396 pki-lab.gov. pXn9AZJvk93NVYvyPPcN8sdk9Vsy3QmJWUa6zyMk5aIWrLwlDsZL8pCiqiyDD8ynuuQ0V5mCHkH5 vZboZLeaxCfONUBfSn9BRkG4I3vrxwA1pWlQXXLj0TJfowyTpie7PnxR6CefS4f9WSpDDA0gnAkK FZ8q4c9FKlx+iAu5YheIoCymDN4lunInIi/2VXK9Hhy5g+TkKN8XjmUZqIGn+oisoKSMq3RyjGBG +lfODXLIo7Q/Rr7Kdq+DXOJWPUmpmSTeJ9UccPv7iWke4Tj5YoxBZlKUS3rCIPvIAnqocnT4lrZ6 6MQMHC8KbKrWSMAEOQOCgxJqWS4Ua82UFo4BQw== )`
	`PKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428142917 20190421142917 4170 pki-lab.gov. UUhwLUTzy4fjNJoKoyBp6oD/pB9kFZmTpa5uXRB6bAGLPj9or3ZlHNfQQmXFyZnY6dONMOwJu4KM tiAUIqUrcsuX5vmK6GRKydH/RmF4A16MX9fN+Uky3104LWNrIDzNovxfHlGs+2+LOhbF4FDZaoSD 3PNLCpXETvFhJj9uHau48rQkR9dFPXx9fXLNF0S4krjYggKU8W3l7b4YFyp3eSLNl2BMn9eVoxAu I3Md3jQo/VYbDnjtgbpVYFDYz1bZacQT7WhFz2MASjh384khrU78QGHY+VIc014OkZcyNvuveaek ppoL0ZEeUFf5xKH0hzBOOQFMTLQKXpGc72BCMg== )`
	RRSIG=57396 and DNSKEY=57396 verifies the SOA RRset
	RRSIG=4170 and DNSKEY=4170 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: