DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-21 13:29:32 UTC

Analyzing DNSSEC problems for SJI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 18253 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to m.root-servers.net for SJI.GOV/A
	Received 620 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 620 octets ;; HEADER SECTION ;; id = 21280 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for GOV/DNSKEY
	Received 613 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 613 octets ;; HEADER SECTION ;; id = 41691 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 370 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 370 octets ;; HEADER SECTION ;; id = 25195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 55112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for SJI.GOV/A
	Received 344 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 344 octets ;; HEADER SECTION ;; id = 50195 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) SJI.GOV. 10800 IN NS dnssec10.datamtn.com. SJI.GOV. 10800 IN NS dnssec11.datamtn.com. SJI.GOV. 10800 IN NS dnssec12.datamtn.com. SJI.GOV. 10800 IN NS dnssec14.datamtn.com. SJI.GOV. 10800 IN NS dnssec9.datamtn.com. SJI.GOV. 3600 IN DS 38918 7 1 0b026f56526ccae23db203b9f6daf5324831f005 SJI.GOV. 3600 IN DS ( 38918 7 2 0617f0f4d8836a526aa13c823c96018c7be675b55a95e38d2b52d37df6982e91 ) SJI.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142932 20260420122932 35496 gov. TPecWoQpCwKm9ph2t1wownfQN1aUGXmSdknCA9Unn2ZI64S6IQDZ6Ewc2qP2lcVBl1Lkd7XQ6GQy 9Hs064vyfQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for SJI.GOV/DNSKEY
	Received 344 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 344 octets ;; HEADER SECTION ;; id = 41548 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) SJI.GOV. 10800 IN NS dnssec10.datamtn.com. SJI.GOV. 10800 IN NS dnssec11.datamtn.com. SJI.GOV. 10800 IN NS dnssec12.datamtn.com. SJI.GOV. 10800 IN NS dnssec14.datamtn.com. SJI.GOV. 10800 IN NS dnssec9.datamtn.com. SJI.GOV. 3600 IN DS 38918 7 1 0b026f56526ccae23db203b9f6daf5324831f005 SJI.GOV. 3600 IN DS ( 38918 7 2 0617f0f4d8836a526aa13c823c96018c7be675b55a95e38d2b52d37df6982e91 ) SJI.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142932 20260420122932 35496 gov. 3W0U2ZAQvi2F68JJyTjZnuRq8+d0Zlk5t51JJ2RYUrcz+HGhuvQ/b0kWK8uZYyGr6kwcz++Q5gXe z+W+Z5lVvg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone SJI.GOV

SJI.GOV

	Checking DS between GOV and SJI.GOV
	Query to a.ns.gov for SJI.GOV/DS
	Received 219 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 219 octets ;; HEADER SECTION ;; id = 5946 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN DS ;; ANSWER SECTION (3 records) SJI.GOV. 3600 IN DS 38918 7 1 0b026f56526ccae23db203b9f6daf5324831f005 SJI.GOV. 3600 IN DS ( 38918 7 2 0617f0f4d8836a526aa13c823c96018c7be675b55a95e38d2b52d37df6982e91 ) SJI.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142932 20260420122932 35496 gov. fHp7QMV7IWIthC6+7VOWSKb9NpGp28g1drzhgvXke2+TnPAg8D0z96NmTiaJ5f6mkCXS30UwUL7i Ss5olbmm0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for SJI.GOV in the GOV zone
	DS=38918/SHA-1 uses a deprecated digest algorithm
	DS=38918/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=38918/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`SJI.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142932 20260420122932 35496 gov. fHp7QMV7IWIthC6+7VOWSKb9NpGp28g1drzhgvXke2+TnPAg8D0z96NmTiaJ5f6mkCXS30UwUL7i Ss5olbmm0g== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=38918/SHA-1 is now in the chain-of-trust
	`SJI.GOV. 3600 IN DS 38918 7 1 0b026f56526ccae23db203b9f6daf5324831f005`
	`SJI.GOV. 3600 IN DS ( 38918 7 2 0617f0f4d8836a526aa13c823c96018c7be675b55a95e38d2b52d37df6982e91 )`
	Query to dnssec14.datamtn.com for SJI.GOV/DNSKEY
	Received 1467 bytes from 65.49.37.203
	;; Response received from [65.49.37.203] 1467 octets ;; HEADER SECTION ;; id = 4617 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) sji.gov. 600 IN DNSKEY ( 257 3 7 BQEAAAAB9CCkkOqyJSr3qCrwnnkYim7hDvWtvwnqP+Sg6nCeActB8TOiJu0VfurhNVPI7euHR0cl Gn2XmP08IBbh5+cYBm8B26FnuCexkW+mVuBWQaZkF6qBmXdulg66OUj7uPiOQfBcw9xuiYSTrz3I GtignqjPXUIDj/DL/VV0goQU28r/MoObo1Bpq4ap/xcKCDgQW8d2rD5InDb478tLafQ5gJO9D8Op 2CvXYpro7Z6XzMXi1+BtmqzS2gKmlT79ICB99lotCmuxwKrSI5ggyRpkEUGDKeYYAKjRORMDUx8T xEgr8zzsmcOIQ5xaNYktAzYnnEbAHYdclgyhqXh9fLm8jQ== ) ; keytag 38918 sji.gov. 600 IN DNSKEY ( 256 3 7 BQEAAAAByKhgIeTVSoWQhrHvXBEQSNRfFi87awywu1S8F7hiRkwuYNBietqPMjKo8iWZPUJKW6Nf YvfCu1JUSUmYGRvJwCijv4vyJaKp/esvOSwZ3yDpCf8wjwirKcQgI7LMZFaEKZeV4t6IWH7MXmJN KbBDVKLyCYF5qYvlZ9QGR97G6tK9Z0XQNIca092H7k96j+hwWQ7IiDfw1v4MoObQOF1R7iSuKOsB rCNPZuwj8L2oBHYMk2T52/Jlkbtcd889lnPYZHYOzZTe8qNmazSw3pp6Y5nLL67sA7FjXB2ZQpiy tMJxXsQW8bSwkUnjgXusKsbITbcB3a3nJ/oBLriOp/9J+w== ) ; keytag 5614 sji.gov. 600 IN DNSKEY ( 256 3 7 BQEAAAAB2Tp5W7F6SISjH/rYKYjiMejPChIAUvGD11QgrqMZgyfklA57TJHAFjgVpbN2bqK/oNZr wvMoJs/EwI5hL8j0OwbLqkpB4Cme2IQb62csHFACL53Ypm5h6PnIBY77RKfxN3lSTZ41jR8Xhv0a 46N5G9kDUXNGSuK7lE7uUc0lZW8RZTkuHh/UgreRDide2xQhM6JIRgw0iY32epQf7aLwOqyb+C1r wdKtT5MeAT4hdaVWHm5rVyy4z+datlUkPoKUxqWBw8JlDjAj+LIM9LfuR3eU25K7GFOzk8qKFF/w MlvGt5NhLOvWBGSxiT0MrVmzHv3qAgfqxYhUI3qwAH9d1Q== ) ; keytag 19471 sji.gov. 600 IN RRSIG ( DNSKEY 7 2 600 20260606130440 20260308130440 19471 sji.gov. fbVZdyOq1cbTEKNC6cheXT5Z19WuL6hbFQt9WIgq36Byc7sYqPQTQqQeVDAVHNjbkjFT5IhUWCyh O0klW2aRG3dFMQ0Mlo7FvbopTOGvgBvkLvjiiOFOsd5UH62rsPx9wB3303p7NWq5rdRrImvk+PUY onevrzWfY8Ju3TWYznlIWPSa9jl33C1DGZ0drM7FtwBrwAXsL/0ln98Jb/TGenulcpDUmW4SgQGd KSyAnLnB+7KkHLo8GKU/VJy0vPX4oRXjRsGs+VkFt6iIJxnQ9yZDkiLbz0I2pctSa1JZF8torXQC bJLBdDq4kko9P9/2Wn+rEmbSaxfwOIRW3DhSBw== ) sji.gov. 600 IN RRSIG ( DNSKEY 7 2 600 20260606130440 20260308130440 38918 sji.gov. 3T/NG4IXyl0QrTMioMD+OMDhcXapL5HTCAcC4fQFteN4BO9It26wMXrvZMJOQvcqpMYLAFCHfijN 6pqONoXyqWlpJQiqPAHI7Q1GA5bXon1tlov6VCECYjn7UkEtsVOwtaiwzKrOuYH2UOA3pHhorUyH qmCUicWIxDppL2d1lJqxaVs3H83Dx6S7Se2FzxyJmoJN+p5FCl5nK4Ydp7q/ouBfVpat3tU0wQXc O/hhMRI/7OGHnHe9FHqlz3BPktjCqn07CZlnLvtMavzqInO1uoSi4IQnPoIpVDFCOzHjzRjDnQ1h cHbZ2JWRs+307+79CrXVGL+4P/ZqTHtMqm4ymA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for SJI.GOV
	`sji.gov. 600 IN DNSKEY ( 257 3 7 BQEAAAAB9CCkkOqyJSr3qCrwnnkYim7hDvWtvwnqP+Sg6nCeActB8TOiJu0VfurhNVPI7euHR0cl Gn2XmP08IBbh5+cYBm8B26FnuCexkW+mVuBWQaZkF6qBmXdulg66OUj7uPiOQfBcw9xuiYSTrz3I GtignqjPXUIDj/DL/VV0goQU28r/MoObo1Bpq4ap/xcKCDgQW8d2rD5InDb478tLafQ5gJO9D8Op 2CvXYpro7Z6XzMXi1+BtmqzS2gKmlT79ICB99lotCmuxwKrSI5ggyRpkEUGDKeYYAKjRORMDUx8T xEgr8zzsmcOIQ5xaNYktAzYnnEbAHYdclgyhqXh9fLm8jQ== ) ; keytag 38918`
	`sji.gov. 600 IN DNSKEY ( 256 3 7 BQEAAAAByKhgIeTVSoWQhrHvXBEQSNRfFi87awywu1S8F7hiRkwuYNBietqPMjKo8iWZPUJKW6Nf YvfCu1JUSUmYGRvJwCijv4vyJaKp/esvOSwZ3yDpCf8wjwirKcQgI7LMZFaEKZeV4t6IWH7MXmJN KbBDVKLyCYF5qYvlZ9QGR97G6tK9Z0XQNIca092H7k96j+hwWQ7IiDfw1v4MoObQOF1R7iSuKOsB rCNPZuwj8L2oBHYMk2T52/Jlkbtcd889lnPYZHYOzZTe8qNmazSw3pp6Y5nLL67sA7FjXB2ZQpiy tMJxXsQW8bSwkUnjgXusKsbITbcB3a3nJ/oBLriOp/9J+w== ) ; keytag 5614`
	`sji.gov. 600 IN DNSKEY ( 256 3 7 BQEAAAAB2Tp5W7F6SISjH/rYKYjiMejPChIAUvGD11QgrqMZgyfklA57TJHAFjgVpbN2bqK/oNZr wvMoJs/EwI5hL8j0OwbLqkpB4Cme2IQb62csHFACL53Ypm5h6PnIBY77RKfxN3lSTZ41jR8Xhv0a 46N5G9kDUXNGSuK7lE7uUc0lZW8RZTkuHh/UgreRDide2xQhM6JIRgw0iY32epQf7aLwOqyb+C1r wdKtT5MeAT4hdaVWHm5rVyy4z+datlUkPoKUxqWBw8JlDjAj+LIM9LfuR3eU25K7GFOzk8qKFF/w MlvGt5NhLOvWBGSxiT0MrVmzHv3qAgfqxYhUI3qwAH9d1Q== ) ; keytag 19471`
	DNSKEY=38918/SEP is now in the chain-of-trust
	DS=38918/SHA-1 verifies DNSKEY=38918/SEP
	DS=38918/SHA-256 verifies DNSKEY=38918/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`sji.gov. 600 IN RRSIG ( DNSKEY 7 2 600 20260606130440 20260308130440 19471 sji.gov. fbVZdyOq1cbTEKNC6cheXT5Z19WuL6hbFQt9WIgq36Byc7sYqPQTQqQeVDAVHNjbkjFT5IhUWCyh O0klW2aRG3dFMQ0Mlo7FvbopTOGvgBvkLvjiiOFOsd5UH62rsPx9wB3303p7NWq5rdRrImvk+PUY onevrzWfY8Ju3TWYznlIWPSa9jl33C1DGZ0drM7FtwBrwAXsL/0ln98Jb/TGenulcpDUmW4SgQGd KSyAnLnB+7KkHLo8GKU/VJy0vPX4oRXjRsGs+VkFt6iIJxnQ9yZDkiLbz0I2pctSa1JZF8torXQC bJLBdDq4kko9P9/2Wn+rEmbSaxfwOIRW3DhSBw== )`
	`sji.gov. 600 IN RRSIG ( DNSKEY 7 2 600 20260606130440 20260308130440 38918 sji.gov. 3T/NG4IXyl0QrTMioMD+OMDhcXapL5HTCAcC4fQFteN4BO9It26wMXrvZMJOQvcqpMYLAFCHfijN 6pqONoXyqWlpJQiqPAHI7Q1GA5bXon1tlov6VCECYjn7UkEtsVOwtaiwzKrOuYH2UOA3pHhorUyH qmCUicWIxDppL2d1lJqxaVs3H83Dx6S7Se2FzxyJmoJN+p5FCl5nK4Ydp7q/ouBfVpat3tU0wQXc O/hhMRI/7OGHnHe9FHqlz3BPktjCqn07CZlnLvtMavzqInO1uoSi4IQnPoIpVDFCOzHjzRjDnQ1h cHbZ2JWRs+307+79CrXVGL+4P/ZqTHtMqm4ymA== )`
	RRSIG=19471 and DNSKEY=19471 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=38918 and DNSKEY=38918/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 2 RRSIG and 3 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to dnssec11.datamtn.com for SJI.GOV/A
	Received 1104 bytes from 64.62.200.147
	;; Response received from [64.62.200.147] 1104 octets ;; HEADER SECTION ;; id = 18454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN A ;; ANSWER SECTION (2 records) sji.gov. 600 IN A 65.49.37.222 sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== ) ;; AUTHORITY SECTION (7 records) sji.gov. 600 IN NS dnssec10.datamtn.com. sji.gov. 600 IN NS dnssec12.datamtn.com. sji.gov. 600 IN NS dnssec14.datamtn.com. sji.gov. 600 IN NS dnssec11.datamtn.com. sji.gov. 600 IN NS dnssec9.datamtn.com. sji.gov. 600 IN NS dnssec7.datamtn.com. sji.gov. 600 IN RRSIG ( NS 7 2 600 20260606130440 20260308130440 19471 sji.gov. t2Bm0tXu/NkMrq6HXH/LJ6kkSExH1YsSDACYX4ACSPWsFDAVqddrofOnkljCvISoBv2KG5iaJUkG qpVi8sT/itbXbXqYT6hpr8cjCKYKuEyq3PbyYwzGR64dhuNWBheoZYjHdq1cL8A8oyQMom2CMex5 g5K/e529vTY53MLUeQ33hmYmVRmx6TQLl+dhndZJCv1bBFR+yPHEaGs9PB5jZap4FUdtahZwcsoT iwKvVxDjJAstftVVUJQwCfcUb9tsbI29waS7rcvve0OSJ0ga/8h0ZEDv9l1QpRJqniLhbMQJx/F6 DJOtRSsWlqth/MTSoXLmxr7T3HfWCNR7NE0EyA== ) ;; ADDITIONAL SECTION (15 records) dnssec7.datamtn.com. 10800 IN A 65.49.37.197 dnssec7.datamtn.com. 10800 IN A 192.198.87.242 dnssec7.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::97 dnssec7.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::101 dnssec9.datamtn.com. 10800 IN A 167.253.35.206 dnssec9.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::206 dnssec10.datamtn.com. 10800 IN A 167.253.35.195 dnssec10.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::195 dnssec11.datamtn.com. 10800 IN A 64.62.200.147 dnssec11.datamtn.com. 10800 IN AAAA 2001:470:1:7a::147 dnssec12.datamtn.com. 10800 IN A 192.198.87.245 dnssec12.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::245 dnssec14.datamtn.com. 10800 IN A 65.49.37.203 dnssec14.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::203 ;; { "EDNS-VERSION": 0 }
	dnssec11.datamtn.com is authoritative for SJI.GOV
	Found RRSIG signed by sji.gov zone
	Query to dnssec14.datamtn.com for SJI.GOV/SOA
	Received 401 bytes from 65.49.37.203
	;; Response received from [65.49.37.203] 401 octets ;; HEADER SECTION ;; id = 26777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN SOA ;; ANSWER SECTION (2 records) sji.gov. 600 IN SOA ( dnssec9.datamtn.com. support.datamtn.com. 2026030830 ;serial 600 ;refresh 600 ;retry 86400 ;expire 600 ;minimum ) sji.gov. 600 IN RRSIG ( SOA 7 2 600 20260606130440 20260308130440 19471 sji.gov. QLpU8gl6CUXMCRX+Sy/zLr8GiPKoANIDLg7uWGCvTaZWokfR4sLgvUwAqfNnoLMg2rEKinPA8Nul 4Lf07yUo9DG56BbZ2leGljSi3lQXrv0R87N1bC3ZiF5xFkyFijvMf2LuVLBxGKAW/mezZb8NB/Dh 55SWVSkB61KMRQoAK9fh6MSS+eGQG1tPHwswKbxjsbwXIdyooYM+77a01xPdJpQ/8TgyOyqnUMv3 TA6EX4vm+tVE/swG2mj1lLatu0BFv8mJlBcmLpsLJ1apQrhnM51eagccA91Kg2KX/jpZvnlpK910 ePywn3YWvj/BFZISUNA6kfvx97FkCEIAuRxH7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dnssec9.datamtn.com for SJI.GOV/SOA
	Received 824 bytes from 167.253.35.206
	;; Response received from [167.253.35.206] 824 octets ;; HEADER SECTION ;; id = 46460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN SOA ;; ANSWER SECTION (2 records) sji.gov. 600 IN SOA ( dnssec9.datamtn.com. support.datamtn.com. 2026030830 ;serial 600 ;refresh 600 ;retry 86400 ;expire 600 ;minimum ) sji.gov. 600 IN RRSIG ( SOA 7 2 600 20260606130440 20260308130440 19471 sji.gov. QLpU8gl6CUXMCRX+Sy/zLr8GiPKoANIDLg7uWGCvTaZWokfR4sLgvUwAqfNnoLMg2rEKinPA8Nul 4Lf07yUo9DG56BbZ2leGljSi3lQXrv0R87N1bC3ZiF5xFkyFijvMf2LuVLBxGKAW/mezZb8NB/Dh 55SWVSkB61KMRQoAK9fh6MSS+eGQG1tPHwswKbxjsbwXIdyooYM+77a01xPdJpQ/8TgyOyqnUMv3 TA6EX4vm+tVE/swG2mj1lLatu0BFv8mJlBcmLpsLJ1apQrhnM51eagccA91Kg2KX/jpZvnlpK910 ePywn3YWvj/BFZISUNA6kfvx97FkCEIAuRxH7A== ) ;; AUTHORITY SECTION (7 records) sji.gov. 600 IN NS dnssec9.datamtn.com. sji.gov. 600 IN NS dnssec10.datamtn.com. sji.gov. 600 IN NS dnssec11.datamtn.com. sji.gov. 600 IN NS dnssec12.datamtn.com. sji.gov. 600 IN NS dnssec14.datamtn.com. sji.gov. 600 IN NS dnssec7.datamtn.com. sji.gov. 600 IN RRSIG ( NS 7 2 600 20260606130440 20260308130440 19471 sji.gov. t2Bm0tXu/NkMrq6HXH/LJ6kkSExH1YsSDACYX4ACSPWsFDAVqddrofOnkljCvISoBv2KG5iaJUkG qpVi8sT/itbXbXqYT6hpr8cjCKYKuEyq3PbyYwzGR64dhuNWBheoZYjHdq1cL8A8oyQMom2CMex5 g5K/e529vTY53MLUeQ33hmYmVRmx6TQLl+dhndZJCv1bBFR+yPHEaGs9PB5jZap4FUdtahZwcsoT iwKvVxDjJAstftVVUJQwCfcUb9tsbI29waS7rcvve0OSJ0ga/8h0ZEDv9l1QpRJqniLhbMQJx/F6 DJOtRSsWlqth/MTSoXLmxr7T3HfWCNR7NE0EyA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dnssec12.datamtn.com for SJI.GOV/SOA
	Received 1132 bytes from 192.198.87.245
	;; Response received from [192.198.87.245] 1132 octets ;; HEADER SECTION ;; id = 16707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN SOA ;; ANSWER SECTION (2 records) sji.gov. 600 IN SOA ( dnssec9.datamtn.com. support.datamtn.com. 2026030830 ;serial 600 ;refresh 600 ;retry 86400 ;expire 600 ;minimum ) sji.gov. 600 IN RRSIG ( SOA 7 2 600 20260606130440 20260308130440 19471 sji.gov. QLpU8gl6CUXMCRX+Sy/zLr8GiPKoANIDLg7uWGCvTaZWokfR4sLgvUwAqfNnoLMg2rEKinPA8Nul 4Lf07yUo9DG56BbZ2leGljSi3lQXrv0R87N1bC3ZiF5xFkyFijvMf2LuVLBxGKAW/mezZb8NB/Dh 55SWVSkB61KMRQoAK9fh6MSS+eGQG1tPHwswKbxjsbwXIdyooYM+77a01xPdJpQ/8TgyOyqnUMv3 TA6EX4vm+tVE/swG2mj1lLatu0BFv8mJlBcmLpsLJ1apQrhnM51eagccA91Kg2KX/jpZvnlpK910 ePywn3YWvj/BFZISUNA6kfvx97FkCEIAuRxH7A== ) ;; AUTHORITY SECTION (7 records) sji.gov. 600 IN NS dnssec9.datamtn.com. sji.gov. 600 IN NS dnssec12.datamtn.com. sji.gov. 600 IN NS dnssec10.datamtn.com. sji.gov. 600 IN NS dnssec7.datamtn.com. sji.gov. 600 IN NS dnssec11.datamtn.com. sji.gov. 600 IN NS dnssec14.datamtn.com. sji.gov. 600 IN RRSIG ( NS 7 2 600 20260606130440 20260308130440 19471 sji.gov. t2Bm0tXu/NkMrq6HXH/LJ6kkSExH1YsSDACYX4ACSPWsFDAVqddrofOnkljCvISoBv2KG5iaJUkG qpVi8sT/itbXbXqYT6hpr8cjCKYKuEyq3PbyYwzGR64dhuNWBheoZYjHdq1cL8A8oyQMom2CMex5 g5K/e529vTY53MLUeQ33hmYmVRmx6TQLl+dhndZJCv1bBFR+yPHEaGs9PB5jZap4FUdtahZwcsoT iwKvVxDjJAstftVVUJQwCfcUb9tsbI29waS7rcvve0OSJ0ga/8h0ZEDv9l1QpRJqniLhbMQJx/F6 DJOtRSsWlqth/MTSoXLmxr7T3HfWCNR7NE0EyA== ) ;; ADDITIONAL SECTION (15 records) dnssec7.datamtn.com. 10800 IN A 192.198.87.242 dnssec7.datamtn.com. 10800 IN A 65.49.37.197 dnssec9.datamtn.com. 10800 IN A 167.253.35.206 dnssec10.datamtn.com. 10800 IN A 167.253.35.195 dnssec11.datamtn.com. 10800 IN A 64.62.200.147 dnssec12.datamtn.com. 10800 IN A 192.198.87.245 dnssec14.datamtn.com. 10800 IN A 65.49.37.203 dnssec7.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::101 dnssec7.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::97 dnssec9.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::206 dnssec10.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::195 dnssec11.datamtn.com. 10800 IN AAAA 2001:470:1:7a::147 dnssec12.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::245 dnssec14.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::203 ;; { "EDNS-VERSION": 0 }
	Query to dnssec7.datamtn.com for SJI.GOV/SOA
	Received 1132 bytes from 192.198.87.242
	;; Response received from [192.198.87.242] 1132 octets ;; HEADER SECTION ;; id = 62648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN SOA ;; ANSWER SECTION (2 records) sji.gov. 600 IN SOA ( dnssec9.datamtn.com. support.datamtn.com. 2026030830 ;serial 600 ;refresh 600 ;retry 86400 ;expire 600 ;minimum ) sji.gov. 600 IN RRSIG ( SOA 7 2 600 20260606130440 20260308130440 19471 sji.gov. QLpU8gl6CUXMCRX+Sy/zLr8GiPKoANIDLg7uWGCvTaZWokfR4sLgvUwAqfNnoLMg2rEKinPA8Nul 4Lf07yUo9DG56BbZ2leGljSi3lQXrv0R87N1bC3ZiF5xFkyFijvMf2LuVLBxGKAW/mezZb8NB/Dh 55SWVSkB61KMRQoAK9fh6MSS+eGQG1tPHwswKbxjsbwXIdyooYM+77a01xPdJpQ/8TgyOyqnUMv3 TA6EX4vm+tVE/swG2mj1lLatu0BFv8mJlBcmLpsLJ1apQrhnM51eagccA91Kg2KX/jpZvnlpK910 ePywn3YWvj/BFZISUNA6kfvx97FkCEIAuRxH7A== ) ;; AUTHORITY SECTION (7 records) sji.gov. 600 IN NS dnssec10.datamtn.com. sji.gov. 600 IN NS dnssec11.datamtn.com. sji.gov. 600 IN NS dnssec12.datamtn.com. sji.gov. 600 IN NS dnssec9.datamtn.com. sji.gov. 600 IN NS dnssec7.datamtn.com. sji.gov. 600 IN NS dnssec14.datamtn.com. sji.gov. 600 IN RRSIG ( NS 7 2 600 20260606130440 20260308130440 19471 sji.gov. t2Bm0tXu/NkMrq6HXH/LJ6kkSExH1YsSDACYX4ACSPWsFDAVqddrofOnkljCvISoBv2KG5iaJUkG qpVi8sT/itbXbXqYT6hpr8cjCKYKuEyq3PbyYwzGR64dhuNWBheoZYjHdq1cL8A8oyQMom2CMex5 g5K/e529vTY53MLUeQ33hmYmVRmx6TQLl+dhndZJCv1bBFR+yPHEaGs9PB5jZap4FUdtahZwcsoT iwKvVxDjJAstftVVUJQwCfcUb9tsbI29waS7rcvve0OSJ0ga/8h0ZEDv9l1QpRJqniLhbMQJx/F6 DJOtRSsWlqth/MTSoXLmxr7T3HfWCNR7NE0EyA== ) ;; ADDITIONAL SECTION (15 records) dnssec7.datamtn.com. 10800 IN A 65.49.37.197 dnssec7.datamtn.com. 10800 IN A 192.198.87.242 dnssec7.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::101 dnssec7.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::97 dnssec9.datamtn.com. 10800 IN A 167.253.35.206 dnssec9.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::206 dnssec10.datamtn.com. 10800 IN A 167.253.35.195 dnssec10.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::195 dnssec11.datamtn.com. 10800 IN A 64.62.200.147 dnssec11.datamtn.com. 10800 IN AAAA 2001:470:1:7a::147 dnssec12.datamtn.com. 10800 IN A 192.198.87.245 dnssec12.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::245 dnssec14.datamtn.com. 10800 IN A 65.49.37.203 dnssec14.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::203 ;; { "EDNS-VERSION": 0 }
	Query to dnssec10.datamtn.com for SJI.GOV/SOA
	Received 824 bytes from 167.253.35.195
	;; Response received from [167.253.35.195] 824 octets ;; HEADER SECTION ;; id = 53931 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN SOA ;; ANSWER SECTION (2 records) sji.gov. 600 IN SOA ( dnssec9.datamtn.com. support.datamtn.com. 2026030830 ;serial 600 ;refresh 600 ;retry 86400 ;expire 600 ;minimum ) sji.gov. 600 IN RRSIG ( SOA 7 2 600 20260606130440 20260308130440 19471 sji.gov. QLpU8gl6CUXMCRX+Sy/zLr8GiPKoANIDLg7uWGCvTaZWokfR4sLgvUwAqfNnoLMg2rEKinPA8Nul 4Lf07yUo9DG56BbZ2leGljSi3lQXrv0R87N1bC3ZiF5xFkyFijvMf2LuVLBxGKAW/mezZb8NB/Dh 55SWVSkB61KMRQoAK9fh6MSS+eGQG1tPHwswKbxjsbwXIdyooYM+77a01xPdJpQ/8TgyOyqnUMv3 TA6EX4vm+tVE/swG2mj1lLatu0BFv8mJlBcmLpsLJ1apQrhnM51eagccA91Kg2KX/jpZvnlpK910 ePywn3YWvj/BFZISUNA6kfvx97FkCEIAuRxH7A== ) ;; AUTHORITY SECTION (7 records) sji.gov. 600 IN NS dnssec9.datamtn.com. sji.gov. 600 IN NS dnssec14.datamtn.com. sji.gov. 600 IN NS dnssec11.datamtn.com. sji.gov. 600 IN NS dnssec12.datamtn.com. sji.gov. 600 IN NS dnssec7.datamtn.com. sji.gov. 600 IN NS dnssec10.datamtn.com. sji.gov. 600 IN RRSIG ( NS 7 2 600 20260606130440 20260308130440 19471 sji.gov. t2Bm0tXu/NkMrq6HXH/LJ6kkSExH1YsSDACYX4ACSPWsFDAVqddrofOnkljCvISoBv2KG5iaJUkG qpVi8sT/itbXbXqYT6hpr8cjCKYKuEyq3PbyYwzGR64dhuNWBheoZYjHdq1cL8A8oyQMom2CMex5 g5K/e529vTY53MLUeQ33hmYmVRmx6TQLl+dhndZJCv1bBFR+yPHEaGs9PB5jZap4FUdtahZwcsoT iwKvVxDjJAstftVVUJQwCfcUb9tsbI29waS7rcvve0OSJ0ga/8h0ZEDv9l1QpRJqniLhbMQJx/F6 DJOtRSsWlqth/MTSoXLmxr7T3HfWCNR7NE0EyA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dnssec11.datamtn.com for SJI.GOV/A
	SJI.GOV A RR has value 65.49.37.222
	Found 1 RRSIGs over A RRset
	`sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== )`
	RRSIG=19471 and DNSKEY=19471 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 3 DNSKEY records validate the A RRset

SJI.GOV

	Query to dnssec14.datamtn.com for SJI.GOV/A
	Received 354 bytes from 65.49.37.203
	;; Response received from [65.49.37.203] 354 octets ;; HEADER SECTION ;; id = 11729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN A ;; ANSWER SECTION (2 records) sji.gov. 600 IN A 65.49.37.222 sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dnssec14.datamtn.com is authoritative for SJI.GOV
	Found RRSIG signed by sji.gov zone
	Query to dnssec14.datamtn.com for SJI.GOV/A
	SJI.GOV A RR has value 65.49.37.222
	Found 1 RRSIGs over A RRset
	`sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== )`
	RRSIG=19471 and DNSKEY=19471 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 3 DNSKEY records validate the A RRset

SJI.GOV

	Query to dnssec7.datamtn.com for SJI.GOV/A
	Received 1104 bytes from 192.198.87.242
	;; Response received from [192.198.87.242] 1104 octets ;; HEADER SECTION ;; id = 52188 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN A ;; ANSWER SECTION (2 records) sji.gov. 600 IN A 65.49.37.222 sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== ) ;; AUTHORITY SECTION (7 records) sji.gov. 600 IN NS dnssec12.datamtn.com. sji.gov. 600 IN NS dnssec14.datamtn.com. sji.gov. 600 IN NS dnssec10.datamtn.com. sji.gov. 600 IN NS dnssec9.datamtn.com. sji.gov. 600 IN NS dnssec11.datamtn.com. sji.gov. 600 IN NS dnssec7.datamtn.com. sji.gov. 600 IN RRSIG ( NS 7 2 600 20260606130440 20260308130440 19471 sji.gov. t2Bm0tXu/NkMrq6HXH/LJ6kkSExH1YsSDACYX4ACSPWsFDAVqddrofOnkljCvISoBv2KG5iaJUkG qpVi8sT/itbXbXqYT6hpr8cjCKYKuEyq3PbyYwzGR64dhuNWBheoZYjHdq1cL8A8oyQMom2CMex5 g5K/e529vTY53MLUeQ33hmYmVRmx6TQLl+dhndZJCv1bBFR+yPHEaGs9PB5jZap4FUdtahZwcsoT iwKvVxDjJAstftVVUJQwCfcUb9tsbI29waS7rcvve0OSJ0ga/8h0ZEDv9l1QpRJqniLhbMQJx/F6 DJOtRSsWlqth/MTSoXLmxr7T3HfWCNR7NE0EyA== ) ;; ADDITIONAL SECTION (15 records) dnssec7.datamtn.com. 10800 IN A 192.198.87.242 dnssec7.datamtn.com. 10800 IN A 65.49.37.197 dnssec7.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::97 dnssec7.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::101 dnssec9.datamtn.com. 10800 IN A 167.253.35.206 dnssec9.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::206 dnssec10.datamtn.com. 10800 IN A 167.253.35.195 dnssec10.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::195 dnssec11.datamtn.com. 10800 IN A 64.62.200.147 dnssec11.datamtn.com. 10800 IN AAAA 2001:470:1:7a::147 dnssec12.datamtn.com. 10800 IN A 192.198.87.245 dnssec12.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::245 dnssec14.datamtn.com. 10800 IN A 65.49.37.203 dnssec14.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::203 ;; { "EDNS-VERSION": 0 }
	dnssec7.datamtn.com is authoritative for SJI.GOV
	Found RRSIG signed by sji.gov zone
	Query to dnssec7.datamtn.com for SJI.GOV/A
	SJI.GOV A RR has value 65.49.37.222
	Found 1 RRSIGs over A RRset
	`sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== )`
	RRSIG=19471 and DNSKEY=19471 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 3 DNSKEY records validate the A RRset

SJI.GOV

	Query to dnssec9.datamtn.com for SJI.GOV/A
	Received 796 bytes from 167.253.35.206
	;; Response received from [167.253.35.206] 796 octets ;; HEADER SECTION ;; id = 8103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN A ;; ANSWER SECTION (2 records) sji.gov. 600 IN A 65.49.37.222 sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== ) ;; AUTHORITY SECTION (7 records) sji.gov. 600 IN NS dnssec10.datamtn.com. sji.gov. 600 IN NS dnssec12.datamtn.com. sji.gov. 600 IN NS dnssec7.datamtn.com. sji.gov. 600 IN NS dnssec14.datamtn.com. sji.gov. 600 IN NS dnssec9.datamtn.com. sji.gov. 600 IN NS dnssec11.datamtn.com. sji.gov. 600 IN RRSIG ( NS 7 2 600 20260606130440 20260308130440 19471 sji.gov. t2Bm0tXu/NkMrq6HXH/LJ6kkSExH1YsSDACYX4ACSPWsFDAVqddrofOnkljCvISoBv2KG5iaJUkG qpVi8sT/itbXbXqYT6hpr8cjCKYKuEyq3PbyYwzGR64dhuNWBheoZYjHdq1cL8A8oyQMom2CMex5 g5K/e529vTY53MLUeQ33hmYmVRmx6TQLl+dhndZJCv1bBFR+yPHEaGs9PB5jZap4FUdtahZwcsoT iwKvVxDjJAstftVVUJQwCfcUb9tsbI29waS7rcvve0OSJ0ga/8h0ZEDv9l1QpRJqniLhbMQJx/F6 DJOtRSsWlqth/MTSoXLmxr7T3HfWCNR7NE0EyA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dnssec9.datamtn.com is authoritative for SJI.GOV
	Found RRSIG signed by sji.gov zone
	Query to dnssec9.datamtn.com for SJI.GOV/A
	SJI.GOV A RR has value 65.49.37.222
	Found 1 RRSIGs over A RRset
	`sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== )`
	RRSIG=19471 and DNSKEY=19471 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 3 DNSKEY records validate the A RRset

SJI.GOV

	Query to dnssec10.datamtn.com for SJI.GOV/A
	Received 796 bytes from 167.253.35.195
	;; Response received from [167.253.35.195] 796 octets ;; HEADER SECTION ;; id = 23234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN A ;; ANSWER SECTION (2 records) sji.gov. 600 IN A 65.49.37.222 sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== ) ;; AUTHORITY SECTION (7 records) sji.gov. 600 IN NS dnssec9.datamtn.com. sji.gov. 600 IN NS dnssec11.datamtn.com. sji.gov. 600 IN NS dnssec7.datamtn.com. sji.gov. 600 IN NS dnssec12.datamtn.com. sji.gov. 600 IN NS dnssec14.datamtn.com. sji.gov. 600 IN NS dnssec10.datamtn.com. sji.gov. 600 IN RRSIG ( NS 7 2 600 20260606130440 20260308130440 19471 sji.gov. t2Bm0tXu/NkMrq6HXH/LJ6kkSExH1YsSDACYX4ACSPWsFDAVqddrofOnkljCvISoBv2KG5iaJUkG qpVi8sT/itbXbXqYT6hpr8cjCKYKuEyq3PbyYwzGR64dhuNWBheoZYjHdq1cL8A8oyQMom2CMex5 g5K/e529vTY53MLUeQ33hmYmVRmx6TQLl+dhndZJCv1bBFR+yPHEaGs9PB5jZap4FUdtahZwcsoT iwKvVxDjJAstftVVUJQwCfcUb9tsbI29waS7rcvve0OSJ0ga/8h0ZEDv9l1QpRJqniLhbMQJx/F6 DJOtRSsWlqth/MTSoXLmxr7T3HfWCNR7NE0EyA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dnssec10.datamtn.com is authoritative for SJI.GOV
	Found RRSIG signed by sji.gov zone
	Query to dnssec10.datamtn.com for SJI.GOV/A
	SJI.GOV A RR has value 65.49.37.222
	Found 1 RRSIGs over A RRset
	`sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== )`
	RRSIG=19471 and DNSKEY=19471 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 3 DNSKEY records validate the A RRset

SJI.GOV

	Query to dnssec12.datamtn.com for SJI.GOV/A
	Received 1104 bytes from 192.198.87.245
	;; Response received from [192.198.87.245] 1104 octets ;; HEADER SECTION ;; id = 15733 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SJI.GOV. IN A ;; ANSWER SECTION (2 records) sji.gov. 600 IN A 65.49.37.222 sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== ) ;; AUTHORITY SECTION (7 records) sji.gov. 600 IN NS dnssec7.datamtn.com. sji.gov. 600 IN NS dnssec11.datamtn.com. sji.gov. 600 IN NS dnssec14.datamtn.com. sji.gov. 600 IN NS dnssec10.datamtn.com. sji.gov. 600 IN NS dnssec9.datamtn.com. sji.gov. 600 IN NS dnssec12.datamtn.com. sji.gov. 600 IN RRSIG ( NS 7 2 600 20260606130440 20260308130440 19471 sji.gov. t2Bm0tXu/NkMrq6HXH/LJ6kkSExH1YsSDACYX4ACSPWsFDAVqddrofOnkljCvISoBv2KG5iaJUkG qpVi8sT/itbXbXqYT6hpr8cjCKYKuEyq3PbyYwzGR64dhuNWBheoZYjHdq1cL8A8oyQMom2CMex5 g5K/e529vTY53MLUeQ33hmYmVRmx6TQLl+dhndZJCv1bBFR+yPHEaGs9PB5jZap4FUdtahZwcsoT iwKvVxDjJAstftVVUJQwCfcUb9tsbI29waS7rcvve0OSJ0ga/8h0ZEDv9l1QpRJqniLhbMQJx/F6 DJOtRSsWlqth/MTSoXLmxr7T3HfWCNR7NE0EyA== ) ;; ADDITIONAL SECTION (15 records) dnssec7.datamtn.com. 10800 IN A 65.49.37.197 dnssec7.datamtn.com. 10800 IN A 192.198.87.242 dnssec9.datamtn.com. 10800 IN A 167.253.35.206 dnssec10.datamtn.com. 10800 IN A 167.253.35.195 dnssec11.datamtn.com. 10800 IN A 64.62.200.147 dnssec12.datamtn.com. 10800 IN A 192.198.87.245 dnssec14.datamtn.com. 10800 IN A 65.49.37.203 dnssec7.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::97 dnssec7.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::101 dnssec9.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::206 dnssec10.datamtn.com. 10800 IN AAAA 2602:2a8:835:1000::195 dnssec11.datamtn.com. 10800 IN AAAA 2001:470:1:7a::147 dnssec12.datamtn.com. 10800 IN AAAA 2607:5600:143:0:1000::245 dnssec14.datamtn.com. 10800 IN AAAA 2001:470:1:7a:2000::203 ;; { "EDNS-VERSION": 0 }
	dnssec12.datamtn.com is authoritative for SJI.GOV
	Found RRSIG signed by sji.gov zone
	Query to dnssec12.datamtn.com for SJI.GOV/A
	SJI.GOV A RR has value 65.49.37.222
	Found 1 RRSIGs over A RRset
	`sji.gov. 600 IN RRSIG ( A 7 2 600 20260606130440 20260308130440 19471 sji.gov. ptk/tpBs40bK2OHh/TKlk8VFqAuOrMeI3zFfKHf+P6aG4RLLtePGxGyf/A2I2K3eO2PaurUZ5R6L LiEU3mjxWuuNgA+DS659Udv6fh60iysDeJOpOWmN6CW5qJBlzugyV7ZY/XL+7X3JXAvILbpfunKk ZT2NyW4d3sV4eH/AwOKsiU+IacmH0M6NGwF+Fr6I7anGWQSNaGmXo3cFKVKCdT9ck2Ohn7jLGQir s9OhgVRnWciDb42XFRI/zZLVYLSFjK8pEAN0wiAFWALK/tO/gmG0cX14RRwI4NIB5A69tgag31C2 nnszFEZcygzHqRoxMps4bN5cWluKiAyKT3dvcg== )`
	RRSIG=19471 and DNSKEY=19471 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 3 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test SJI.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: