DNSSEC Analyzer - PRESIDIOTRUST.GOV

Domain Name:

Time: 2019-11-18 02:07:14 UTC, NTP stratum 4

Analyzing DNSSEC problems for PRESIDIOTRUST.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 44444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to k.root-servers.net for PRESIDIOTRUST.GOV/A
	Received 672 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (672 bytes) ;; HEADER SECTION ;; id = 18270 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 38024 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (403 bytes) ;; HEADER SECTION ;; id = 5214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 923 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (923 bytes) ;; HEADER SECTION ;; id = 23894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191126200254 20191111195754 7698 gov. BKP8tCaVkJjoo0kjWzUfMqiBr0nH5hSqZX4iGrrkG6wFpazlQJPACx/y4lQrEgUbriqYRWDywC27 ZFkQN0prnD9HYo8IJjhs6JH1FzftEb+gZEdPEN6Lf0LGzpyMf7NMnRpMR1lMxJpcfE80I94f0MOp lMlrQfSpizNjLtCLuVhRwneJ/IeWcWNZ6dBbLKRNWYiVXm6x9Z5xx+6M8r+EFIj/pQTbc7OVkQNX UIqBIV2h6WSBaRdk3LoPCVsoYon1DyfhEPRgpOKC1vGAo3Azl48GRc9qdq7/enrC7LlJ54A2uPR0 iE72MWbL+bgRBMtKsSEVt0nEaicSywrApevlKw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191126200254 20191111195754 7698 gov. BKP8tCaVkJjoo0kjWzUfMqiBr0nH5hSqZX4iGrrkG6wFpazlQJPACx/y4lQrEgUbriqYRWDywC27 ZFkQN0prnD9HYo8IJjhs6JH1FzftEb+gZEdPEN6Lf0LGzpyMf7NMnRpMR1lMxJpcfE80I94f0MOp lMlrQfSpizNjLtCLuVhRwneJ/IeWcWNZ6dBbLKRNWYiVXm6x9Z5xx+6M8r+EFIj/pQTbc7OVkQNX UIqBIV2h6WSBaRdk3LoPCVsoYon1DyfhEPRgpOKC1vGAo3Azl48GRc9qdq7/enrC7LlJ54A2uPR0 iE72MWbL+bgRBMtKsSEVt0nEaicSywrApevlKw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=32795 is now in the chain-of-trust
	DNSKEY=14320 is now in the chain-of-trust
	Query to d.gov-servers.net for PRESIDIOTRUST.GOV/A
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for PRESIDIOTRUST.GOV/A: 'IPv6 transport disabled'
	Received 490 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (490 bytes) ;; HEADER SECTION ;; id = 63401 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) PRESIDIOTRUST.GOV. 86400 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN DS ( 18396 7 2 973a495dda668d22b593c8f74071d7faf10e279e11457cca4e492e62411696f7 ) PRESIDIOTRUST.GOV. 3600 IN DS ( 18396 7 1 71a5f335b455d0571dccbd017ee19d3d2d41e5ef ) PRESIDIOTRUST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. kBD/9CIvAhuSTDHJCGPL2R7YFi/Hrmb07+obySy58hpnjW5f2kc7qbHFtId8V2Uoz/U3Ffw5thR4 WXygp7psDD6wS9w9+cUQUQHKrsi8XTJVHdOZQ/XhiIXNbZi73jis5U/Poj22N89DokQRT2D0I4e/ 5xeXQYAYa2+Qe+WTZF1zgkmOhIuMYiqsK4fVdFmU64ayj/KJZq9JqPQ1iFyyIQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for PRESIDIOTRUST.GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for PRESIDIOTRUST.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 490 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (490 bytes) ;; HEADER SECTION ;; id = 52519 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) PRESIDIOTRUST.GOV. 86400 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 86400 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN DS ( 18396 7 2 973a495dda668d22b593c8f74071d7faf10e279e11457cca4e492e62411696f7 ) PRESIDIOTRUST.GOV. 3600 IN DS ( 18396 7 1 71a5f335b455d0571dccbd017ee19d3d2d41e5ef ) PRESIDIOTRUST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. kBD/9CIvAhuSTDHJCGPL2R7YFi/Hrmb07+obySy58hpnjW5f2kc7qbHFtId8V2Uoz/U3Ffw5thR4 WXygp7psDD6wS9w9+cUQUQHKrsi8XTJVHdOZQ/XhiIXNbZi73jis5U/Poj22N89DokQRT2D0I4e/ 5xeXQYAYa2+Qe+WTZF1zgkmOhIuMYiqsK4fVdFmU64ayj/KJZq9JqPQ1iFyyIQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone PRESIDIOTRUST.GOV

PRESIDIOTRUST.GOV

	Checking DS between GOV and PRESIDIOTRUST.GOV
	Query to a.gov-servers.net for PRESIDIOTRUST.GOV/DS
	Received 325 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (325 bytes) ;; HEADER SECTION ;; id = 33254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN DS ;; ANSWER SECTION (3 records) PRESIDIOTRUST.GOV. 3600 IN DS ( 18396 7 2 973a495dda668d22b593c8f74071d7faf10e279e11457cca4e492e62411696f7 ) PRESIDIOTRUST.GOV. 3600 IN DS ( 18396 7 1 71a5f335b455d0571dccbd017ee19d3d2d41e5ef ) PRESIDIOTRUST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. kBD/9CIvAhuSTDHJCGPL2R7YFi/Hrmb07+obySy58hpnjW5f2kc7qbHFtId8V2Uoz/U3Ffw5thR4 WXygp7psDD6wS9w9+cUQUQHKrsi8XTJVHdOZQ/XhiIXNbZi73jis5U/Poj22N89DokQRT2D0I4e/ 5xeXQYAYa2+Qe+WTZF1zgkmOhIuMYiqsK4fVdFmU64ayj/KJZq9JqPQ1iFyyIQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for PRESIDIOTRUST.GOV in the GOV zone
	DS=18396/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=18396/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`PRESIDIOTRUST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. kBD/9CIvAhuSTDHJCGPL2R7YFi/Hrmb07+obySy58hpnjW5f2kc7qbHFtId8V2Uoz/U3Ffw5thR4 WXygp7psDD6wS9w9+cUQUQHKrsi8XTJVHdOZQ/XhiIXNbZi73jis5U/Poj22N89DokQRT2D0I4e/ 5xeXQYAYa2+Qe+WTZF1zgkmOhIuMYiqsK4fVdFmU64ayj/KJZq9JqPQ1iFyyIQ== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=18396/SHA-256 is now in the chain-of-trust
	`PRESIDIOTRUST.GOV. 3600 IN DS ( 18396 7 2 973a495dda668d22b593c8f74071d7faf10e279e11457cca4e492e62411696f7 )`
	`PRESIDIOTRUST.GOV. 3600 IN DS ( 18396 7 1 71a5f335b455d0571dccbd017ee19d3d2d41e5ef )`
	Query to asia9.akam.net for PRESIDIOTRUST.GOV/DNSKEY
	Error querying asia9.akam.net/2a02:26f0:67:0:0:0:0:40 for PRESIDIOTRUST.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 923 bytes from 95.100.175.65
	;; Answer received from 95.100.175.65 (923 bytes) ;; HEADER SECTION ;; id = 64369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) PRESIDIOTRUST.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAcBVKMLpl1kEF/ekoPKMk4bu4nZVL0aWNYOgv9/yZjMf5Qj/Bd5H9GRGyIvAl4r4D+xCRJyf dDa6egm3Z0HclHYsJvOAHwuBEgsE/NHGRkitBfb00/O2m0OIp5j8+x3KWGlVhUQRgRIFix5/AJWI 2g1JygdnAuaqDfKCD6OC/wUH ) ; Key ID = 35945 PRESIDIOTRUST.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAbrpQik5Rt3OzQ37OYJvmIoAFiaqcfFra6hW6/BnGUM6yMc/f+NfIrDb/nVBt6vDU1B3+3IN g+g/SOg+HRR2qmStV/ic7CT0Wakbosisp2kSPFiYhdWjlBJjkPMWkTF6vpUxGra0g2doeMSk7Sf+ XTNsPjlmvsPrXFTO9gZj7xn4/c19M/Kev4UOfTWY1YH/gzctnAdcbDBRd/z8O0m0MAMacU6AYOJU 069Sye02bHeb4Tad43MT3QbXJt11arWS6WRWzWRsGs/lAvN0lllbDa0CjCl/bLMJiFoUEhk2sT6i xwaJgQDlWjw8LZu7aZaDmh/+6maAWEplENtKqVH0dR0= ) ; Key ID = 18396 PRESIDIOTRUST.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAcSLT6S91ndrzMOMInrQdJctklk6rFthZ3cAGhj5quFQHv/+JsSwT1GfpZNCBFdAnaxsGIQb DUzAiy7Q3wn0o51K2f2mawSbO4w4h4jJnvFw/wd2Dbt0jVQeqxwMoueXm84ZubkPtCx3jrIaBoNm zRGnDUNGGVjwOWE+OjTSiQs5 ) ; Key ID = 62405 PRESIDIOTRUST.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20191120033210 20191117023210 18396 presidiotrust.gov. d28iV1UxHr9d8Fko3nExqRrcmCRsDi+gKvSfe/miM7STwcQ3dUXxwnOEO1nh5bC2A6uNBx/Vm1SO MDnhyvg+zQ9AfSbX6fyZvLi24qo1yeuylneqX10pAZQVLxa3tHEDc7fRpM4cJ/WG1lX6FQJW+eCR Hr0eAjj9IwHlLEIGjTdRddWpBRRcDmfWiFzx0q4AcSfT5ZUd6mTgyC+ajbKOFLQ6uOQA4ZX61Bpu 6QGWl1i383ORE0ZEDoTuD7YdKczzXvRn2yhWOYYI0LwiVw8hOUYW7KEyyllVZZMmJbXq46TqfzjJ bcJ4z8mIIlAYHEd07KxJyoLjN4Evmq8BIdQ6bg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for PRESIDIOTRUST.GOV
	`PRESIDIOTRUST.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAcBVKMLpl1kEF/ekoPKMk4bu4nZVL0aWNYOgv9/yZjMf5Qj/Bd5H9GRGyIvAl4r4D+xCRJyf dDa6egm3Z0HclHYsJvOAHwuBEgsE/NHGRkitBfb00/O2m0OIp5j8+x3KWGlVhUQRgRIFix5/AJWI 2g1JygdnAuaqDfKCD6OC/wUH ) ; Key ID = 35945`
	`PRESIDIOTRUST.GOV. 7200 IN DNSKEY ( 257 3 7 AwEAAbrpQik5Rt3OzQ37OYJvmIoAFiaqcfFra6hW6/BnGUM6yMc/f+NfIrDb/nVBt6vDU1B3+3IN g+g/SOg+HRR2qmStV/ic7CT0Wakbosisp2kSPFiYhdWjlBJjkPMWkTF6vpUxGra0g2doeMSk7Sf+ XTNsPjlmvsPrXFTO9gZj7xn4/c19M/Kev4UOfTWY1YH/gzctnAdcbDBRd/z8O0m0MAMacU6AYOJU 069Sye02bHeb4Tad43MT3QbXJt11arWS6WRWzWRsGs/lAvN0lllbDa0CjCl/bLMJiFoUEhk2sT6i xwaJgQDlWjw8LZu7aZaDmh/+6maAWEplENtKqVH0dR0= ) ; Key ID = 18396`
	`PRESIDIOTRUST.GOV. 7200 IN DNSKEY ( 256 3 7 AwEAAcSLT6S91ndrzMOMInrQdJctklk6rFthZ3cAGhj5quFQHv/+JsSwT1GfpZNCBFdAnaxsGIQb DUzAiy7Q3wn0o51K2f2mawSbO4w4h4jJnvFw/wd2Dbt0jVQeqxwMoueXm84ZubkPtCx3jrIaBoNm zRGnDUNGGVjwOWE+OjTSiQs5 ) ; Key ID = 62405`
	DNSKEY=18396/SEP is now in the chain-of-trust
	DS=18396/SHA-256 verifies DNSKEY=18396/SEP
	DS=18396/SHA-1 verifies DNSKEY=18396/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`PRESIDIOTRUST.GOV. 7200 IN RRSIG ( DNSKEY 7 2 7200 20191120033210 20191117023210 18396 presidiotrust.gov. d28iV1UxHr9d8Fko3nExqRrcmCRsDi+gKvSfe/miM7STwcQ3dUXxwnOEO1nh5bC2A6uNBx/Vm1SO MDnhyvg+zQ9AfSbX6fyZvLi24qo1yeuylneqX10pAZQVLxa3tHEDc7fRpM4cJ/WG1lX6FQJW+eCR Hr0eAjj9IwHlLEIGjTdRddWpBRRcDmfWiFzx0q4AcSfT5ZUd6mTgyC+ajbKOFLQ6uOQA4ZX61Bpu 6QGWl1i383ORE0ZEDoTuD7YdKczzXvRn2yhWOYYI0LwiVw8hOUYW7KEyyllVZZMmJbXq46TqfzjJ bcJ4z8mIIlAYHEd07KxJyoLjN4Evmq8BIdQ6bg== )`
	RRSIG=18396 and DNSKEY=18396/SEP verifies the DNSKEY RRset
	DNSKEY=35945 is now in the chain-of-trust
	DNSKEY=62405 is now in the chain-of-trust
	Query to usw1.akam.net for PRESIDIOTRUST.GOV/A
	Received 568 bytes from 23.61.199.66
	;; Answer received from 23.61.199.66 (568 bytes) ;; HEADER SECTION ;; id = 12809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) gmla70al3rqdkk25gh41sbkoflas8ot1.PRESIDIOTRUST.GOV. 300 IN NSEC3 ( 1 0 1 5bd930ba478c2c75 hg0se93b9al137gkl4u83lpsfbmv1nj5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) gmla70al3rqdkk25gh41sbkoflas8ot1.PRESIDIOTRUST.GOV. 300 IN RRSIG ( NSEC3 7 3 300 20191120033210 20191117023210 35945 presidiotrust.gov. IN4RSH/kHss3EeJ6vOVbh7DjJoqJAV6SfyZH3mDg5Pi1BAF/BvpbBi3F8bkNLULxaccfyXGYk1je wPJzHcKb8IIgFCREN/c1MzR1KyNcLUi0BMO2evC7/smuZemDRAPelGo6rq6+ubpmOBIDm3oRhPF8 Fr/H+au12mSS76+Z9VI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PRESIDIOTRUST.GOV is authoritative for PRESIDIOTRUST.GOV
	Found RRSIG signed by presidiotrust.gov zone
	Query to usw1.akam.net for PRESIDIOTRUST.GOV/SOA
	Received 645 bytes from 23.61.199.66
	;; Answer received from 23.61.199.66 (645 bytes) ;; HEADER SECTION ;; id = 29071 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN SOA ;; ANSWER SECTION (2 records) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) ;; AUTHORITY SECTION (9 records) PRESIDIOTRUST.GOV. 3600 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 3600 IN RRSIG ( NS 7 2 3600 20191120033210 20191117023210 35945 presidiotrust.gov. lT1wFzXC2qxRahBDlRU07i/O8mgSOqDAhmupDvMSky0B05YiVCMQ+g3C4cAq75NCZIHtH8e/2hh7 s2YhijJ1Ke70jMcgwnbipSzWYOmwNOTu/FvWVbIOAbPlkXJOMb3AG4uRIVoial6PxtwYTjEhu630 RgL5A9ct2PUyh8nW9zE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to usw5.akam.net for PRESIDIOTRUST.GOV/SOA
	Received 645 bytes from 23.211.132.64
	;; Answer received from 23.211.132.64 (645 bytes) ;; HEADER SECTION ;; id = 42159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN SOA ;; ANSWER SECTION (2 records) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) ;; AUTHORITY SECTION (9 records) PRESIDIOTRUST.GOV. 3600 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN RRSIG ( NS 7 2 3600 20191120033210 20191117023210 35945 presidiotrust.gov. lT1wFzXC2qxRahBDlRU07i/O8mgSOqDAhmupDvMSky0B05YiVCMQ+g3C4cAq75NCZIHtH8e/2hh7 s2YhijJ1Ke70jMcgwnbipSzWYOmwNOTu/FvWVbIOAbPlkXJOMb3AG4uRIVoial6PxtwYTjEhu630 RgL5A9ct2PUyh8nW9zE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to asia9.akam.net for PRESIDIOTRUST.GOV/SOA
	Received 645 bytes from 95.100.175.65
	;; Answer received from 95.100.175.65 (645 bytes) ;; HEADER SECTION ;; id = 5613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN SOA ;; ANSWER SECTION (2 records) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) ;; AUTHORITY SECTION (9 records) PRESIDIOTRUST.GOV. 3600 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 3600 IN RRSIG ( NS 7 2 3600 20191120033210 20191117023210 35945 presidiotrust.gov. lT1wFzXC2qxRahBDlRU07i/O8mgSOqDAhmupDvMSky0B05YiVCMQ+g3C4cAq75NCZIHtH8e/2hh7 s2YhijJ1Ke70jMcgwnbipSzWYOmwNOTu/FvWVbIOAbPlkXJOMb3AG4uRIVoial6PxtwYTjEhu630 RgL5A9ct2PUyh8nW9zE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1-145.akam.net for PRESIDIOTRUST.GOV/SOA
	Error querying ns1-145.akam.net/2600:1401:2:0:0:0:0:91 for PRESIDIOTRUST.GOV/SOA: 'IPv6 transport disabled'
	Received 645 bytes from 193.108.91.145
	;; Answer received from 193.108.91.145 (645 bytes) ;; HEADER SECTION ;; id = 24531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN SOA ;; ANSWER SECTION (2 records) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) ;; AUTHORITY SECTION (9 records) PRESIDIOTRUST.GOV. 3600 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 3600 IN RRSIG ( NS 7 2 3600 20191120033210 20191117023210 35945 presidiotrust.gov. lT1wFzXC2qxRahBDlRU07i/O8mgSOqDAhmupDvMSky0B05YiVCMQ+g3C4cAq75NCZIHtH8e/2hh7 s2YhijJ1Ke70jMcgwnbipSzWYOmwNOTu/FvWVbIOAbPlkXJOMb3AG4uRIVoial6PxtwYTjEhu630 RgL5A9ct2PUyh8nW9zE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1-176.akam.net for PRESIDIOTRUST.GOV/SOA
	Error querying ns1-176.akam.net/2600:1401:2:0:0:0:0:b0 for PRESIDIOTRUST.GOV/SOA: 'IPv6 transport disabled'
	Received 645 bytes from 193.108.91.176
	;; Answer received from 193.108.91.176 (645 bytes) ;; HEADER SECTION ;; id = 54044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN SOA ;; ANSWER SECTION (2 records) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) ;; AUTHORITY SECTION (9 records) PRESIDIOTRUST.GOV. 3600 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 3600 IN RRSIG ( NS 7 2 3600 20191120033210 20191117023210 35945 presidiotrust.gov. lT1wFzXC2qxRahBDlRU07i/O8mgSOqDAhmupDvMSky0B05YiVCMQ+g3C4cAq75NCZIHtH8e/2hh7 s2YhijJ1Ke70jMcgwnbipSzWYOmwNOTu/FvWVbIOAbPlkXJOMb3AG4uRIVoial6PxtwYTjEhu630 RgL5A9ct2PUyh8nW9zE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to use6.akam.net for PRESIDIOTRUST.GOV/SOA
	Received 645 bytes from 2.16.40.65
	;; Answer received from 2.16.40.65 (645 bytes) ;; HEADER SECTION ;; id = 24971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN SOA ;; ANSWER SECTION (2 records) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) ;; AUTHORITY SECTION (9 records) PRESIDIOTRUST.GOV. 3600 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 3600 IN RRSIG ( NS 7 2 3600 20191120033210 20191117023210 35945 presidiotrust.gov. lT1wFzXC2qxRahBDlRU07i/O8mgSOqDAhmupDvMSky0B05YiVCMQ+g3C4cAq75NCZIHtH8e/2hh7 s2YhijJ1Ke70jMcgwnbipSzWYOmwNOTu/FvWVbIOAbPlkXJOMb3AG4uRIVoial6PxtwYTjEhu630 RgL5A9ct2PUyh8nW9zE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to zc.akam.net for PRESIDIOTRUST.GOV/SOA
	Error querying zc.akam.net/2600:1480:f000:0:0:0:0:42 for PRESIDIOTRUST.GOV/SOA: 'IPv6 transport disabled'
	Received 645 bytes from 184.26.160.66
	;; Answer received from 184.26.160.66 (645 bytes) ;; HEADER SECTION ;; id = 12958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN SOA ;; ANSWER SECTION (2 records) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) ;; AUTHORITY SECTION (9 records) PRESIDIOTRUST.GOV. 3600 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 3600 IN RRSIG ( NS 7 2 3600 20191120033210 20191117023210 35945 presidiotrust.gov. lT1wFzXC2qxRahBDlRU07i/O8mgSOqDAhmupDvMSky0B05YiVCMQ+g3C4cAq75NCZIHtH8e/2hh7 s2YhijJ1Ke70jMcgwnbipSzWYOmwNOTu/FvWVbIOAbPlkXJOMb3AG4uRIVoial6PxtwYTjEhu630 RgL5A9ct2PUyh8nW9zE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to usw6.akam.net for PRESIDIOTRUST.GOV/SOA
	Received 645 bytes from 23.61.199.64
	;; Answer received from 23.61.199.64 (645 bytes) ;; HEADER SECTION ;; id = 45122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN SOA ;; ANSWER SECTION (2 records) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) ;; AUTHORITY SECTION (9 records) PRESIDIOTRUST.GOV. 3600 IN NS zc.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw6.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw5.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS usw1.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-145.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS asia9.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS ns1-176.akam.net. PRESIDIOTRUST.GOV. 3600 IN NS use6.akam.net. PRESIDIOTRUST.GOV. 3600 IN RRSIG ( NS 7 2 3600 20191120033210 20191117023210 35945 presidiotrust.gov. lT1wFzXC2qxRahBDlRU07i/O8mgSOqDAhmupDvMSky0B05YiVCMQ+g3C4cAq75NCZIHtH8e/2hh7 s2YhijJ1Ke70jMcgwnbipSzWYOmwNOTu/FvWVbIOAbPlkXJOMb3AG4uRIVoial6PxtwYTjEhu630 RgL5A9ct2PUyh8nW9zE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to usw1.akam.net for PRESIDIOTRUST.GOV/A
	Received 568 bytes from 23.61.199.66
	;; Answer received from 23.61.199.66 (568 bytes) ;; HEADER SECTION ;; id = 11483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PRESIDIOTRUST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gmla70al3rqdkk25gh41sbkoflas8ot1.PRESIDIOTRUST.GOV. 300 IN NSEC3 ( 1 0 1 5bd930ba478c2c75 hg0se93b9al137gkl4u83lpsfbmv1nj5 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) gmla70al3rqdkk25gh41sbkoflas8ot1.PRESIDIOTRUST.GOV. 300 IN RRSIG ( NSEC3 7 3 300 20191120033210 20191117023210 35945 presidiotrust.gov. IN4RSH/kHss3EeJ6vOVbh7DjJoqJAV6SfyZH3mDg5Pi1BAF/BvpbBi3F8bkNLULxaccfyXGYk1je wPJzHcKb8IIgFCREN/c1MzR1KyNcLUi0BMO2evC7/smuZemDRAPelGo6rq6+ubpmOBIDm3oRhPF8 Fr/H+au12mSS76+Z9VI= ) PRESIDIOTRUST.GOV. 300 IN SOA ( 399e-adcs001.ede.pitc.GOV. postmaster.whitehouse.GOV. 2017022236 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`PRESIDIOTRUST.GOV. 300 IN RRSIG ( SOA 7 2 300 20191120033210 20191117023210 35945 presidiotrust.gov. KkjN8uNnz0b+EGoLDxqxxi9a1NJiQK207PqTx11ILShaJcxBret9izSmNUN2rdcZ71ExbeWyyx0U tpfPgJ+6fOI9Y+TRR4QYouLZ9WJktk/dA1ZvmFV6qMDRu8y8mGKFatOgDXbrEWIqlS5yqehlFFau FvPmeflk8mWPlss6+7M= )`
	RRSIG=35945 and DNSKEY=35945 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PRESIDIOTRUST.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: