DNSSEC Debugger - TOX21.GOV

Domain Name:

Time: 2026-03-19 17:25:48 UTC

Analyzing DNSSEC problems for TOX21.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 22773 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to f.root-servers.net for TOX21.GOV/A
	Received 616 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 616 octets ;; HEADER SECTION ;; id = 37770 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260401050000 20260319040000 21831 . WvSxP1tM4MVbtufkKrau7ftSbBF3mAJ5WuETNSWRaV34CaONS9ryaU+0lI/KIikeqkIygmIQAP7S osR5DoLd6M1FEKPRRR37hLLxnpFZZaOxhrAIZ2hlJ1MPA6IDcip9NpG50MYjqH78VnoGZJ6Hb98/ mCS2hwOdiKRXECWw6IaCht9ngwMKp1WdyBLKgGm3XH11Rzf6o+oa+oKBXOFTTC5KT4iponLNx7P3 DVCgn09Y29rRNOFJF84TjFTWng325aFN/56c1jzfbaZ8ZCcO/zPSr7/jcWdxVtfMB06YkyVwaxEH FOsqT+zi5KjQCiSFCL5nfFDn6v+KXmbhuGOUyw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 610 octets ;; HEADER SECTION ;; id = 20344 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260401050000 20260319040000 21831 . WvSxP1tM4MVbtufkKrau7ftSbBF3mAJ5WuETNSWRaV34CaONS9ryaU+0lI/KIikeqkIygmIQAP7S osR5DoLd6M1FEKPRRR37hLLxnpFZZaOxhrAIZ2hlJ1MPA6IDcip9NpG50MYjqH78VnoGZJ6Hb98/ mCS2hwOdiKRXECWw6IaCht9ngwMKp1WdyBLKgGm3XH11Rzf6o+oa+oKBXOFTTC5KT4iponLNx7P3 DVCgn09Y29rRNOFJF84TjFTWng325aFN/56c1jzfbaZ8ZCcO/zPSr7/jcWdxVtfMB06YkyVwaxEH FOsqT+zi5KjQCiSFCL5nfFDn6v+KXmbhuGOUyw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 370 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 370 octets ;; HEADER SECTION ;; id = 5283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260401050000 20260319040000 21831 . WvSxP1tM4MVbtufkKrau7ftSbBF3mAJ5WuETNSWRaV34CaONS9ryaU+0lI/KIikeqkIygmIQAP7S osR5DoLd6M1FEKPRRR37hLLxnpFZZaOxhrAIZ2hlJ1MPA6IDcip9NpG50MYjqH78VnoGZJ6Hb98/ mCS2hwOdiKRXECWw6IaCht9ngwMKp1WdyBLKgGm3XH11Rzf6o+oa+oKBXOFTTC5KT4iponLNx7P3 DVCgn09Y29rRNOFJF84TjFTWng325aFN/56c1jzfbaZ8ZCcO/zPSr7/jcWdxVtfMB06YkyVwaxEH FOsqT+zi5KjQCiSFCL5nfFDn6v+KXmbhuGOUyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260401050000 20260319040000 21831 . WvSxP1tM4MVbtufkKrau7ftSbBF3mAJ5WuETNSWRaV34CaONS9ryaU+0lI/KIikeqkIygmIQAP7S osR5DoLd6M1FEKPRRR37hLLxnpFZZaOxhrAIZ2hlJ1MPA6IDcip9NpG50MYjqH78VnoGZJ6Hb98/ mCS2hwOdiKRXECWw6IaCht9ngwMKp1WdyBLKgGm3XH11Rzf6o+oa+oKBXOFTTC5KT4iponLNx7P3 DVCgn09Y29rRNOFJF84TjFTWng325aFN/56c1jzfbaZ8ZCcO/zPSr7/jcWdxVtfMB06YkyVwaxEH FOsqT+zi5KjQCiSFCL5nfFDn6v+KXmbhuGOUyw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.GOV for TOX21.GOV/A
	Received 338 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 338 octets ;; HEADER SECTION ;; id = 65095 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TOX21.GOV. 10800 IN NS ns.nih.GOV. TOX21.GOV. 10800 IN NS ns2.nih.GOV. TOX21.GOV. 10800 IN NS ns3.nih.GOV. TOX21.GOV. 3600 IN DS ( 17224 8 2 1b6c504296903178e22afc6a86221903aa076ea1ea0b47ddaef6eacb6c7caea4 ) TOX21.GOV. 3600 IN DS ( 21952 8 2 0a74552f5161a3cc52b405d1ab9c4674d0cfbb2d3a8e44fc51161e0015048b5a ) TOX21.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260320182549 20260318162549 35496 gov. awbO7/MKaKd0ZvA7/c2f0J+Dakwod2GFxDqQYY2oGK4OzNXxQlPiNRKYTYlDpQT6sZ1hu5DLBM6h UfB4KTzoMg== ) ;; ADDITIONAL SECTION (4 records) ns.nih.GOV. 3600 IN A 128.231.128.251 ns2.nih.GOV. 3600 IN A 128.231.64.1 ns3.nih.GOV. 3600 IN A 165.112.4.230 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.GOV for TOX21.GOV/DNSKEY
	Received 338 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 338 octets ;; HEADER SECTION ;; id = 25607 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TOX21.GOV. 10800 IN NS ns.nih.GOV. TOX21.GOV. 10800 IN NS ns2.nih.GOV. TOX21.GOV. 10800 IN NS ns3.nih.GOV. TOX21.GOV. 3600 IN DS ( 17224 8 2 1b6c504296903178e22afc6a86221903aa076ea1ea0b47ddaef6eacb6c7caea4 ) TOX21.GOV. 3600 IN DS ( 21952 8 2 0a74552f5161a3cc52b405d1ab9c4674d0cfbb2d3a8e44fc51161e0015048b5a ) TOX21.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260320182549 20260318162549 35496 gov. JYeYKVLgTZQRnKemvyDgepH34cqwlw5s+SFEw4MPBUGDyymQAe2/sHjfJBNqnMa6RUpK4qVE4yH7 nXhttXIW+A== ) ;; ADDITIONAL SECTION (4 records) ns.nih.GOV. 3600 IN A 128.231.128.251 ns2.nih.GOV. 3600 IN A 128.231.64.1 ns3.nih.GOV. 3600 IN A 165.112.4.230 ;; { "EDNS-VERSION": 0 }
	Found child zone TOX21.GOV

TOX21.GOV

	Checking DS between GOV and TOX21.GOV
	Query to c.ns.GOV for TOX21.GOV/DS
	Received 233 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 233 octets ;; HEADER SECTION ;; id = 49175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN DS ;; ANSWER SECTION (3 records) TOX21.GOV. 3600 IN DS ( 17224 8 2 1b6c504296903178e22afc6a86221903aa076ea1ea0b47ddaef6eacb6c7caea4 ) TOX21.GOV. 3600 IN DS ( 21952 8 2 0a74552f5161a3cc52b405d1ab9c4674d0cfbb2d3a8e44fc51161e0015048b5a ) TOX21.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260320182549 20260318162549 35496 gov. /Trag75cQSvIVsEiPDUYlAbAZdUekbSLX+eVmHK1hIFdFAbLxriiiBmte8oYfQkMHWlF/vIYZrg5 CqlY/yfd2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for TOX21.GOV in the GOV zone
	DS=17224/SHA-256 has algorithm RSASHA256
	DS=21952/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`TOX21.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260320182549 20260318162549 35496 gov. /Trag75cQSvIVsEiPDUYlAbAZdUekbSLX+eVmHK1hIFdFAbLxriiiBmte8oYfQkMHWlF/vIYZrg5 CqlY/yfd2Q== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=17224/SHA-256 is now in the chain-of-trust
	DS=21952/SHA-256 is now in the chain-of-trust
	`TOX21.GOV. 3600 IN DS ( 17224 8 2 1b6c504296903178e22afc6a86221903aa076ea1ea0b47ddaef6eacb6c7caea4 )`
	`TOX21.GOV. 3600 IN DS ( 21952 8 2 0a74552f5161a3cc52b405d1ab9c4674d0cfbb2d3a8e44fc51161e0015048b5a )`
	Query to ns.nih.GOV for TOX21.GOV/DNSKEY
	Received 1649 bytes from 128.231.128.251
	;; Response received from [128.231.128.251] 1649 octets ;; HEADER SECTION ;; id = 35059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN DNSKEY ;; ANSWER SECTION (7 records) TOX21.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAZ0JzWQ5mUfbXeiSuPXIip05Y+JmHQtHeFzCvszD5KJ7zA/gVH5z330MzYqj5tOv2mddb5rt op2NE/saycnSxdLOavfNY4GxG9WfKq6UQYZtv/eQY0O1pnkZDhN51gydTA9fBWCDpBtukzJb2dEm obBT9j8cZnG5wx2OwQnq8SCaUZkm9pjJa+2st7nTjnvEqjII6BuHqJu1wnLz2xf7dFsvwflq19jN YiJpigzZm8IqmkQj1A/Uu4sX2LlHf7Afo6b1ErTlMr03mrI66iRGnjYWP7v/jD2ppDPG/F/hRZxZ UY4Z07rXqAZZOTPyDJAj0z63ZjEfASkiL+2qhVeA5B0= ) ; keytag 17224 TOX21.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAbiPKeeHkzsD+it6viDD9IaLqpcDZBsBgUgQ0m1NZL7qLKQYu3pcxoVSEYveKXevQ6WxjxCF nGFuOapVQf5mF53vJoxTtO5SqVVWVvb37fVVSWCFfVyAZp9baEqAVirXgbC/5oFza1wsJ7Cz9KIO NYXTgN5+0nU/VyZuKpUXCcO58rDQdvX3jhrVdYckhjO9uFhfqPpXFqV+2xeuKysKd9zXIy5T4b45 yqJpiA1tr8YboFDRsflZuIoAdKsLFT6bOcLvUfUxAp5ty+TDIz4CSCXAZwiq3U1+XES3quWmCJ8U ZhAsG8/njGA8WkFCJa77DY3gUxxD3xwUFTWc+kwvtsU= ) ; keytag 21952 TOX21.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAbCtrexSzTUfXqUVemV6waE7AV8N3KkowjVeIbPpJGPqsHCDAAHiUfYXrdpbxqjzhisbPB6e NMim6PbhJqBPWLVG7g7pvbHSy/9fYXTS0bHApZY0GJ0Qid/8oGTq4alYbcxxljIdwzA+wTkBNhUG 5zSUWD3bM6dUxF7u9e5I20cP ) ; keytag 42966 TOX21.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAd3VJfN9u97x7VddxE+0Qi+R2y4FSfYqhaI+H+VR8N+qUHDVk7QSVTrfmj0PoWZEy8L/qr4k KMc0eL6xVmJl2Y9kRomzKs8RwDkSekUfsF1wfnoTgCJZF1nBtnAj17kk03B+R/DXz5tuKUbGlA4Y yUZ4k+BB232H6LJa242uFQtx ) ; keytag 43413 TOX21.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260323114419 20260319104947 17224 tox21.gov. jqMf+WemT3Dy3qZ6hR6pxX5gD1KTJHu7c4ihI9IKoofnO3zbKWs+ffOlABojkvChOluYlWwTgy1J YI5PlY2WV48cfrXuPQtoF94I/8feMeYLdPH2/9auYJRLmZCnM/ovUGLFya6jXpsPMd5mN41nYtwH fnZgoVy2Ti28L3tjdR9zLhURbD50Ip4puhLOBhH6+Ga3vYsHEyzTlc9n5Jdx2B1vpNGrKYSDjs2S XJt6Km74VJ7b7h5JeoSVUOG9mVrgbgT8OpLSeTMPCEm5PWoR+Kym1rG3ViFje+izMdMXpo7uR8Zp pxE+Om19KMoOVIN5XCIQzukbVYcKF37CFfHH1A== ) TOX21.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260323114419 20260319104947 21952 tox21.gov. SSTy/YbQ2f7Mm6UJbjFZkXyII+xesz6mWfAw0QQu4/cyNIS9HcJr6hSUgaMyhV5XphqvlvS0c1KD SpKD//QhVZyiv7UBihfTS7V0M3pm01xh/2Pdk+eOx1T6uR1ylGSX8wz24WyXAVcsbVZ39gJ6HVcU lSZ+/grX6iLuydhXjyheCYOaEwKh4gV3Few+vU9LJJqOXEDe+rwKJ7TmrqvjDLFiRx+SZPGUIhGS 2B/c8f/xj/Dby8GsmcIPnlCPKE0a8eGb1qZuC0IGe96ht5LY4NWEhSKINu9qIhKkSNS2DXSD0ke5 GnAAGfHoVYelpVNB/N36iBCJdfSoPbQpu01zNw== ) TOX21.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260323114419 20260319104947 43413 tox21.gov. nw5TCe2blEO0MkDf+jSz52fFY/9yhbOZeCrcqLETke/GCLC/Ocdsluta8jGQw8pWnePusThIjPcs E8eL/Y+9uI6VJgtO/t1Zj1EeJHHKlNDes759xb03Yn2bttrIpHBntrl8C+32le2NQsabyFA4i1R5 iz0rCkkqENt3cG/txKo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for TOX21.GOV
	`TOX21.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAZ0JzWQ5mUfbXeiSuPXIip05Y+JmHQtHeFzCvszD5KJ7zA/gVH5z330MzYqj5tOv2mddb5rt op2NE/saycnSxdLOavfNY4GxG9WfKq6UQYZtv/eQY0O1pnkZDhN51gydTA9fBWCDpBtukzJb2dEm obBT9j8cZnG5wx2OwQnq8SCaUZkm9pjJa+2st7nTjnvEqjII6BuHqJu1wnLz2xf7dFsvwflq19jN YiJpigzZm8IqmkQj1A/Uu4sX2LlHf7Afo6b1ErTlMr03mrI66iRGnjYWP7v/jD2ppDPG/F/hRZxZ UY4Z07rXqAZZOTPyDJAj0z63ZjEfASkiL+2qhVeA5B0= ) ; keytag 17224`
	`TOX21.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAbiPKeeHkzsD+it6viDD9IaLqpcDZBsBgUgQ0m1NZL7qLKQYu3pcxoVSEYveKXevQ6WxjxCF nGFuOapVQf5mF53vJoxTtO5SqVVWVvb37fVVSWCFfVyAZp9baEqAVirXgbC/5oFza1wsJ7Cz9KIO NYXTgN5+0nU/VyZuKpUXCcO58rDQdvX3jhrVdYckhjO9uFhfqPpXFqV+2xeuKysKd9zXIy5T4b45 yqJpiA1tr8YboFDRsflZuIoAdKsLFT6bOcLvUfUxAp5ty+TDIz4CSCXAZwiq3U1+XES3quWmCJ8U ZhAsG8/njGA8WkFCJa77DY3gUxxD3xwUFTWc+kwvtsU= ) ; keytag 21952`
	`TOX21.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAbCtrexSzTUfXqUVemV6waE7AV8N3KkowjVeIbPpJGPqsHCDAAHiUfYXrdpbxqjzhisbPB6e NMim6PbhJqBPWLVG7g7pvbHSy/9fYXTS0bHApZY0GJ0Qid/8oGTq4alYbcxxljIdwzA+wTkBNhUG 5zSUWD3bM6dUxF7u9e5I20cP ) ; keytag 42966`
	`TOX21.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAd3VJfN9u97x7VddxE+0Qi+R2y4FSfYqhaI+H+VR8N+qUHDVk7QSVTrfmj0PoWZEy8L/qr4k KMc0eL6xVmJl2Y9kRomzKs8RwDkSekUfsF1wfnoTgCJZF1nBtnAj17kk03B+R/DXz5tuKUbGlA4Y yUZ4k+BB232H6LJa242uFQtx ) ; keytag 43413`
	DNSKEY=17224/SEP is now in the chain-of-trust
	DS=17224/SHA-256 verifies DNSKEY=17224/SEP
	DNSKEY=21952/SEP is now in the chain-of-trust
	DS=21952/SHA-256 verifies DNSKEY=21952/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`TOX21.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260323114419 20260319104947 17224 tox21.gov. jqMf+WemT3Dy3qZ6hR6pxX5gD1KTJHu7c4ihI9IKoofnO3zbKWs+ffOlABojkvChOluYlWwTgy1J YI5PlY2WV48cfrXuPQtoF94I/8feMeYLdPH2/9auYJRLmZCnM/ovUGLFya6jXpsPMd5mN41nYtwH fnZgoVy2Ti28L3tjdR9zLhURbD50Ip4puhLOBhH6+Ga3vYsHEyzTlc9n5Jdx2B1vpNGrKYSDjs2S XJt6Km74VJ7b7h5JeoSVUOG9mVrgbgT8OpLSeTMPCEm5PWoR+Kym1rG3ViFje+izMdMXpo7uR8Zp pxE+Om19KMoOVIN5XCIQzukbVYcKF37CFfHH1A== )`
	`TOX21.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260323114419 20260319104947 21952 tox21.gov. SSTy/YbQ2f7Mm6UJbjFZkXyII+xesz6mWfAw0QQu4/cyNIS9HcJr6hSUgaMyhV5XphqvlvS0c1KD SpKD//QhVZyiv7UBihfTS7V0M3pm01xh/2Pdk+eOx1T6uR1ylGSX8wz24WyXAVcsbVZ39gJ6HVcU lSZ+/grX6iLuydhXjyheCYOaEwKh4gV3Few+vU9LJJqOXEDe+rwKJ7TmrqvjDLFiRx+SZPGUIhGS 2B/c8f/xj/Dby8GsmcIPnlCPKE0a8eGb1qZuC0IGe96ht5LY4NWEhSKINu9qIhKkSNS2DXSD0ke5 GnAAGfHoVYelpVNB/N36iBCJdfSoPbQpu01zNw== )`
	`TOX21.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260323114419 20260319104947 43413 tox21.gov. nw5TCe2blEO0MkDf+jSz52fFY/9yhbOZeCrcqLETke/GCLC/Ocdsluta8jGQw8pWnePusThIjPcs E8eL/Y+9uI6VJgtO/t1Zj1EeJHHKlNDes759xb03Yn2bttrIpHBntrl8C+32le2NQsabyFA4i1R5 iz0rCkkqENt3cG/txKo= )`
	RRSIG=17224 and DNSKEY=17224/SEP verifies the DNSKEY RRset
	RRSIG=21952 and DNSKEY=21952/SEP verifies the DNSKEY RRset
	RRSIG=43413 and DNSKEY=43413 verifies the DNSKEY RRset
	DNSKEY=42966 is now in the chain-of-trust
	DNSKEY=43413 is now in the chain-of-trust
	Query to ns3.nih.GOV for TOX21.GOV/A
	Received 223 bytes from 165.112.4.230
	;; Response received from [165.112.4.230] 223 octets ;; HEADER SECTION ;; id = 52048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN A ;; ANSWER SECTION (2 records) TOX21.GOV. 28800 IN A 128.231.19.108 TOX21.GOV. 28800 IN RRSIG ( A 8 2 28800 20260322235856 20260318235417 43413 tox21.gov. ElfvntRAuhw1Atf/SSHdXdYC91tb+QgLNFYhEubAysszvRwFi/UPkWw4T09fNp1Uufyb+cmpbKJk Bvt/GR3xqWkzjeglTY1NMVLBvW9GG941Km8h8HPDqTTpnNddEhQ5LknqLJhILDEaeKw6u3gtxfH9 YBDB7N1DY/p10o5YZtY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.nih.GOV is authoritative for TOX21.GOV
	Found RRSIG signed by tox21.gov zone
	Query to ns.nih.GOV for TOX21.GOV/SOA
	Received 264 bytes from 128.231.128.251
	;; Response received from [128.231.128.251] 264 octets ;; HEADER SECTION ;; id = 23401 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN SOA ;; ANSWER SECTION (2 records) TOX21.GOV. 28800 IN SOA ( ns.nih.gov. hostmaster.nih.gov. 17560 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) TOX21.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20260323114947 20260319104947 43413 tox21.gov. vyszdcrZAvCYvDz406pBPVAfVFoVMRrda35NqDXQ/c3tssHM2qKBEunkUUxDQKUfuKusNzdgd/bn PSO6qjgyPgkpbX4XyJ9uL2wLNNXlDX2xLSXCWYn0LdtemfSdlOobtN6ynLFgNIhCx79Swsb1F+HK ozc1KkfnIFFRz+AK/r8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.nih.GOV for TOX21.GOV/SOA
	Received 264 bytes from 128.231.64.1
	;; Response received from [128.231.64.1] 264 octets ;; HEADER SECTION ;; id = 29637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN SOA ;; ANSWER SECTION (2 records) TOX21.GOV. 28800 IN SOA ( ns.nih.gov. hostmaster.nih.gov. 17560 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) TOX21.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20260323114947 20260319104947 43413 tox21.gov. vyszdcrZAvCYvDz406pBPVAfVFoVMRrda35NqDXQ/c3tssHM2qKBEunkUUxDQKUfuKusNzdgd/bn PSO6qjgyPgkpbX4XyJ9uL2wLNNXlDX2xLSXCWYn0LdtemfSdlOobtN6ynLFgNIhCx79Swsb1F+HK ozc1KkfnIFFRz+AK/r8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.nih.GOV for TOX21.GOV/A
	Received 223 bytes from 165.112.4.230
	;; Response received from [165.112.4.230] 223 octets ;; HEADER SECTION ;; id = 16312 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN A ;; ANSWER SECTION (2 records) TOX21.GOV. 28800 IN A 128.231.19.108 TOX21.GOV. 28800 IN RRSIG ( A 8 2 28800 20260322235856 20260318235417 43413 tox21.gov. ElfvntRAuhw1Atf/SSHdXdYC91tb+QgLNFYhEubAysszvRwFi/UPkWw4T09fNp1Uufyb+cmpbKJk Bvt/GR3xqWkzjeglTY1NMVLBvW9GG941Km8h8HPDqTTpnNddEhQ5LknqLJhILDEaeKw6u3gtxfH9 YBDB7N1DY/p10o5YZtY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	TOX21.GOV A RR has value 128.231.19.108
	Found 1 RRSIGs over A RRset
	`TOX21.GOV. 28800 IN RRSIG ( A 8 2 28800 20260322235856 20260318235417 43413 tox21.gov. ElfvntRAuhw1Atf/SSHdXdYC91tb+QgLNFYhEubAysszvRwFi/UPkWw4T09fNp1Uufyb+cmpbKJk Bvt/GR3xqWkzjeglTY1NMVLBvW9GG941Km8h8HPDqTTpnNddEhQ5LknqLJhILDEaeKw6u3gtxfH9 YBDB7N1DY/p10o5YZtY= )`
	RRSIG=43413 and DNSKEY=43413 verifies the A RRset

TOX21.GOV

	Query to ns2.nih.GOV for TOX21.GOV/A
	Received 223 bytes from 128.231.64.1
	;; Response received from [128.231.64.1] 223 octets ;; HEADER SECTION ;; id = 64077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN A ;; ANSWER SECTION (2 records) TOX21.GOV. 28800 IN A 128.231.19.108 TOX21.GOV. 28800 IN RRSIG ( A 8 2 28800 20260322235856 20260318235417 43413 tox21.gov. ElfvntRAuhw1Atf/SSHdXdYC91tb+QgLNFYhEubAysszvRwFi/UPkWw4T09fNp1Uufyb+cmpbKJk Bvt/GR3xqWkzjeglTY1NMVLBvW9GG941Km8h8HPDqTTpnNddEhQ5LknqLJhILDEaeKw6u3gtxfH9 YBDB7N1DY/p10o5YZtY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.nih.GOV is authoritative for TOX21.GOV
	Found RRSIG signed by tox21.gov zone
	Query to ns2.nih.GOV for TOX21.GOV/A
	Received 223 bytes from 128.231.64.1
	;; Response received from [128.231.64.1] 223 octets ;; HEADER SECTION ;; id = 31973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN A ;; ANSWER SECTION (2 records) TOX21.GOV. 28800 IN A 128.231.19.108 TOX21.GOV. 28800 IN RRSIG ( A 8 2 28800 20260322235856 20260318235417 43413 tox21.gov. ElfvntRAuhw1Atf/SSHdXdYC91tb+QgLNFYhEubAysszvRwFi/UPkWw4T09fNp1Uufyb+cmpbKJk Bvt/GR3xqWkzjeglTY1NMVLBvW9GG941Km8h8HPDqTTpnNddEhQ5LknqLJhILDEaeKw6u3gtxfH9 YBDB7N1DY/p10o5YZtY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	TOX21.GOV A RR has value 128.231.19.108
	Found 1 RRSIGs over A RRset
	`TOX21.GOV. 28800 IN RRSIG ( A 8 2 28800 20260322235856 20260318235417 43413 tox21.gov. ElfvntRAuhw1Atf/SSHdXdYC91tb+QgLNFYhEubAysszvRwFi/UPkWw4T09fNp1Uufyb+cmpbKJk Bvt/GR3xqWkzjeglTY1NMVLBvW9GG941Km8h8HPDqTTpnNddEhQ5LknqLJhILDEaeKw6u3gtxfH9 YBDB7N1DY/p10o5YZtY= )`
	RRSIG=43413 and DNSKEY=43413 verifies the A RRset

TOX21.GOV

	Query to ns.nih.GOV for TOX21.GOV/A
	Received 223 bytes from 128.231.128.251
	;; Response received from [128.231.128.251] 223 octets ;; HEADER SECTION ;; id = 3958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN A ;; ANSWER SECTION (2 records) TOX21.GOV. 28800 IN A 128.231.19.108 TOX21.GOV. 28800 IN RRSIG ( A 8 2 28800 20260322235856 20260318235417 43413 tox21.gov. ElfvntRAuhw1Atf/SSHdXdYC91tb+QgLNFYhEubAysszvRwFi/UPkWw4T09fNp1Uufyb+cmpbKJk Bvt/GR3xqWkzjeglTY1NMVLBvW9GG941Km8h8HPDqTTpnNddEhQ5LknqLJhILDEaeKw6u3gtxfH9 YBDB7N1DY/p10o5YZtY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.nih.GOV is authoritative for TOX21.GOV
	Found RRSIG signed by tox21.gov zone
	Query to ns.nih.GOV for TOX21.GOV/A
	Received 223 bytes from 128.231.128.251
	;; Response received from [128.231.128.251] 223 octets ;; HEADER SECTION ;; id = 36579 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; TOX21.GOV. IN A ;; ANSWER SECTION (2 records) TOX21.GOV. 28800 IN A 128.231.19.108 TOX21.GOV. 28800 IN RRSIG ( A 8 2 28800 20260322235856 20260318235417 43413 tox21.gov. ElfvntRAuhw1Atf/SSHdXdYC91tb+QgLNFYhEubAysszvRwFi/UPkWw4T09fNp1Uufyb+cmpbKJk Bvt/GR3xqWkzjeglTY1NMVLBvW9GG941Km8h8HPDqTTpnNddEhQ5LknqLJhILDEaeKw6u3gtxfH9 YBDB7N1DY/p10o5YZtY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	TOX21.GOV A RR has value 128.231.19.108
	Found 1 RRSIGs over A RRset
	`TOX21.GOV. 28800 IN RRSIG ( A 8 2 28800 20260322235856 20260318235417 43413 tox21.gov. ElfvntRAuhw1Atf/SSHdXdYC91tb+QgLNFYhEubAysszvRwFi/UPkWw4T09fNp1Uufyb+cmpbKJk Bvt/GR3xqWkzjeglTY1NMVLBvW9GG941Km8h8HPDqTTpnNddEhQ5LknqLJhILDEaeKw6u3gtxfH9 YBDB7N1DY/p10o5YZtY= )`
	RRSIG=43413 and DNSKEY=43413 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TOX21.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: