DNSSEC Analyzer - TREASURY.GOV

Domain Name:

Time: 2019-11-18 01:50:05 UTC, NTP stratum 4

Analyzing DNSSEC problems for TREASURY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 45392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to f.root-servers.net for TREASURY.GOV/A
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for TREASURY.GOV/A: 'IPv6 transport disabled'
	Received 670 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (670 bytes) ;; HEADER SECTION ;; id = 10238 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; TREASURY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (661 bytes) ;; HEADER SECTION ;; id = 42621 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (403 bytes) ;; HEADER SECTION ;; id = 28076 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 923 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (923 bytes) ;; HEADER SECTION ;; id = 54320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191126200254 20191111195754 7698 gov. BKP8tCaVkJjoo0kjWzUfMqiBr0nH5hSqZX4iGrrkG6wFpazlQJPACx/y4lQrEgUbriqYRWDywC27 ZFkQN0prnD9HYo8IJjhs6JH1FzftEb+gZEdPEN6Lf0LGzpyMf7NMnRpMR1lMxJpcfE80I94f0MOp lMlrQfSpizNjLtCLuVhRwneJ/IeWcWNZ6dBbLKRNWYiVXm6x9Z5xx+6M8r+EFIj/pQTbc7OVkQNX UIqBIV2h6WSBaRdk3LoPCVsoYon1DyfhEPRgpOKC1vGAo3Azl48GRc9qdq7/enrC7LlJ54A2uPR0 iE72MWbL+bgRBMtKsSEVt0nEaicSywrApevlKw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191126200254 20191111195754 7698 gov. BKP8tCaVkJjoo0kjWzUfMqiBr0nH5hSqZX4iGrrkG6wFpazlQJPACx/y4lQrEgUbriqYRWDywC27 ZFkQN0prnD9HYo8IJjhs6JH1FzftEb+gZEdPEN6Lf0LGzpyMf7NMnRpMR1lMxJpcfE80I94f0MOp lMlrQfSpizNjLtCLuVhRwneJ/IeWcWNZ6dBbLKRNWYiVXm6x9Z5xx+6M8r+EFIj/pQTbc7OVkQNX UIqBIV2h6WSBaRdk3LoPCVsoYon1DyfhEPRgpOKC1vGAo3Azl48GRc9qdq7/enrC7LlJ54A2uPR0 iE72MWbL+bgRBMtKsSEVt0nEaicSywrApevlKw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=32795 is now in the chain-of-trust
	DNSKEY=14320 is now in the chain-of-trust
	Query to a.gov-servers.net for TREASURY.GOV/A
	Received 528 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (528 bytes) ;; HEADER SECTION ;; id = 15896 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASURY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) TREASURY.GOV. 86400 IN NS ns1.TREASURY.GOV. TREASURY.GOV. 86400 IN NS ns3.TREASURY.GOV. TREASURY.GOV. 3600 IN DS 44076 7 1 dd1324e94cea98082c49499a2096701a5d52be90 TREASURY.GOV. 3600 IN DS ( 37335 7 2 544e6bc62628eaa035e9724022143ee2abb4a9b2793e6dfb9e6aa32758479cd3 ) TREASURY.GOV. 3600 IN DS ( 44076 7 2 f6188a8fad83e1dc0e921693a18d4607152d1d95bdddba77e64e0ad45b2106bf ) TREASURY.GOV. 3600 IN DS 37335 7 1 091e24715042d07436a6ddd363614bfa7e2c5da5 TREASURY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. FDcNwj47m5u+RO8oL2Zb1Bw4xuflc2ePJkmTa3g02eo7w2SdLJKqHy3yG2fobgqACNl79EAz1Xrg J/eUHl0r+yYiAiRLpjYrF2Uzbj7hwz8D+WlkDu+xacmEMyiCDH6aj0QmgxeCjKb8jzYbJd5rg0FB Vz5ZL/I0GOnU+WUh7jTBtnVIm7lVMmuWCAwmJZuWli5P5vV4rtlfMFShRHzu2A== ) ;; ADDITIONAL SECTION (5 records) ns1.TREASURY.GOV. 86400 IN A 166.123.208.249 ns1.TREASURY.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.TREASURY.GOV. 86400 IN A 164.95.95.155 ns3.TREASURY.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for TREASURY.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for TREASURY.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 528 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (528 bytes) ;; HEADER SECTION ;; id = 31002 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASURY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) TREASURY.GOV. 86400 IN NS ns1.TREASURY.GOV. TREASURY.GOV. 86400 IN NS ns3.TREASURY.GOV. TREASURY.GOV. 3600 IN DS 44076 7 1 dd1324e94cea98082c49499a2096701a5d52be90 TREASURY.GOV. 3600 IN DS ( 37335 7 2 544e6bc62628eaa035e9724022143ee2abb4a9b2793e6dfb9e6aa32758479cd3 ) TREASURY.GOV. 3600 IN DS ( 44076 7 2 f6188a8fad83e1dc0e921693a18d4607152d1d95bdddba77e64e0ad45b2106bf ) TREASURY.GOV. 3600 IN DS 37335 7 1 091e24715042d07436a6ddd363614bfa7e2c5da5 TREASURY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. FDcNwj47m5u+RO8oL2Zb1Bw4xuflc2ePJkmTa3g02eo7w2SdLJKqHy3yG2fobgqACNl79EAz1Xrg J/eUHl0r+yYiAiRLpjYrF2Uzbj7hwz8D+WlkDu+xacmEMyiCDH6aj0QmgxeCjKb8jzYbJd5rg0FB Vz5ZL/I0GOnU+WUh7jTBtnVIm7lVMmuWCAwmJZuWli5P5vV4rtlfMFShRHzu2A== ) ;; ADDITIONAL SECTION (5 records) ns1.TREASURY.GOV. 86400 IN A 166.123.208.249 ns1.TREASURY.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.TREASURY.GOV. 86400 IN A 164.95.95.155 ns3.TREASURY.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TREASURY.GOV

TREASURY.GOV

	Checking DS between GOV and TREASURY.GOV
	Query to a.gov-servers.net for TREASURY.GOV/DS
	Received 404 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (404 bytes) ;; HEADER SECTION ;; id = 63861 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASURY.GOV. IN DS ;; ANSWER SECTION (5 records) TREASURY.GOV. 3600 IN DS 44076 7 1 dd1324e94cea98082c49499a2096701a5d52be90 TREASURY.GOV. 3600 IN DS ( 37335 7 2 544e6bc62628eaa035e9724022143ee2abb4a9b2793e6dfb9e6aa32758479cd3 ) TREASURY.GOV. 3600 IN DS ( 44076 7 2 f6188a8fad83e1dc0e921693a18d4607152d1d95bdddba77e64e0ad45b2106bf ) TREASURY.GOV. 3600 IN DS 37335 7 1 091e24715042d07436a6ddd363614bfa7e2c5da5 TREASURY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. FDcNwj47m5u+RO8oL2Zb1Bw4xuflc2ePJkmTa3g02eo7w2SdLJKqHy3yG2fobgqACNl79EAz1Xrg J/eUHl0r+yYiAiRLpjYrF2Uzbj7hwz8D+WlkDu+xacmEMyiCDH6aj0QmgxeCjKb8jzYbJd5rg0FB Vz5ZL/I0GOnU+WUh7jTBtnVIm7lVMmuWCAwmJZuWli5P5vV4rtlfMFShRHzu2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for TREASURY.GOV in the GOV zone
	DS=44076/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=37335/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=44076/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=37335/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`TREASURY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. FDcNwj47m5u+RO8oL2Zb1Bw4xuflc2ePJkmTa3g02eo7w2SdLJKqHy3yG2fobgqACNl79EAz1Xrg J/eUHl0r+yYiAiRLpjYrF2Uzbj7hwz8D+WlkDu+xacmEMyiCDH6aj0QmgxeCjKb8jzYbJd5rg0FB Vz5ZL/I0GOnU+WUh7jTBtnVIm7lVMmuWCAwmJZuWli5P5vV4rtlfMFShRHzu2A== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=44076/SHA-1 is now in the chain-of-trust
	DS=37335/SHA-256 is now in the chain-of-trust
	`TREASURY.GOV. 3600 IN DS 44076 7 1 dd1324e94cea98082c49499a2096701a5d52be90`
	`TREASURY.GOV. 3600 IN DS ( 37335 7 2 544e6bc62628eaa035e9724022143ee2abb4a9b2793e6dfb9e6aa32758479cd3 )`
	`TREASURY.GOV. 3600 IN DS ( 44076 7 2 f6188a8fad83e1dc0e921693a18d4607152d1d95bdddba77e64e0ad45b2106bf )`
	`TREASURY.GOV. 3600 IN DS 37335 7 1 091e24715042d07436a6ddd363614bfa7e2c5da5`
	Query to ns3.TREASURY.GOV for TREASURY.GOV/DNSKEY
	Error querying ns3.TREASURY.GOV/2610:108:3000:100a:0:0:0:155 for TREASURY.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1001 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1001 bytes) ;; HEADER SECTION ;; id = 29376 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASURY.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) TREASURY.GOV. 300 IN DNSKEY ( 257 3 7 AwEAAetc3eKkeC/p+F6gRK0ZK8pYYqP1VpF/LyFFLrDAEnFlc2yvGMUUQFASrMfWxrvvavk8Gm3n bIPS1hcxDIbJ6iu2XQ4i5S6d1dthelg4qIJaZAlmL5R0Oa0Q96oe3W8KspkQtvlAo5MMyb0laRqg DdQVy5x9RhBwtZ9RhGqpu40t ) ; Key ID = 44076 TREASURY.GOV. 300 IN DNSKEY ( 257 3 7 AwEAAY6e0SvBSa07HHBbLIPe1LxTtSFV0IWe0cA2O8r000n5YxIxvjg5BAeL1oewyPFyew0xCQfF +fE56dVXdXUQDBztBQT5eTDwq0vnrezLfOFrC6dRGysKgzTEr+xCnDJTZTDuilTJKZdfuoNjuAp+ 111IBCKhLDUlmO19bejIfnLN ) ; Key ID = 37335 TREASURY.GOV. 300 IN DNSKEY ( 256 3 7 AwEAAd5sGp8aGi2Xa37YZEADt4wfKct0Fj8O+H9dUz4Y4vBKWY3jClAEdIkECiToF8gt+KTO2l1M iQZaAri5dAnJFC0V/cdsc9Pd+Wfbx3FOW6Sw2dfPWStWfPhUesrapQulEvg6zyx200edHTyjiYNG hTGVwv+bP2FLnoyO+WWJ0kkt ) ; Key ID = 24527 TREASURY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20191124200944 20191117200944 44076 treasury.gov. oc5S3E8IdiAPgDKIqB4wcqFuVQxkX46BJM8XQTz1lml2sgwlO00bWcTXN3kbcfJUvZ7ANKqdAiib BipYQy3BmMhZ4fYAurSF/BTd8auwGPvJb2oVrkqp6J0Dg/kjUFBiAxsJxQ+y/+yG1jQm2aK1c9ze uZSYVYXeR7ylfclTU7U= ) TREASURY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20191124200944 20191117200944 37335 treasury.gov. aWjzVaBKOqBih1UsW1V8bW+gAMu7LlEK6zWCjTvFVrPVlQyjlu+UkiJ2xsEdtSatC4qfg55pajyR wM+v0RDUi7HVwJwIVk1YlEGilaKPWakiFL1dlW1T/CSuSJo+4EcCuZeYDgXi6eVzohX50pd/s0lh hyH0Qx79Vf498CT3Mkw= ) TREASURY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20191124200944 20191117200944 24527 treasury.gov. zw7Mc0qdHmW8zVj4Hy9X9Hl867RJzPB5J0SSTLjVB6DTXL8ECmTcIg4OjEzOsis2k2gtwqkBEcuz blJl8ygri6DAJIG48pXQJ5i77DNm6hFiD5oydCtUF2RO2SzPJxD0LKC+2hN1rqQ/YkJur4ROH56a hY9MNTWKuvdm4Uva3oo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for TREASURY.GOV
	`TREASURY.GOV. 300 IN DNSKEY ( 257 3 7 AwEAAetc3eKkeC/p+F6gRK0ZK8pYYqP1VpF/LyFFLrDAEnFlc2yvGMUUQFASrMfWxrvvavk8Gm3n bIPS1hcxDIbJ6iu2XQ4i5S6d1dthelg4qIJaZAlmL5R0Oa0Q96oe3W8KspkQtvlAo5MMyb0laRqg DdQVy5x9RhBwtZ9RhGqpu40t ) ; Key ID = 44076`
	`TREASURY.GOV. 300 IN DNSKEY ( 257 3 7 AwEAAY6e0SvBSa07HHBbLIPe1LxTtSFV0IWe0cA2O8r000n5YxIxvjg5BAeL1oewyPFyew0xCQfF +fE56dVXdXUQDBztBQT5eTDwq0vnrezLfOFrC6dRGysKgzTEr+xCnDJTZTDuilTJKZdfuoNjuAp+ 111IBCKhLDUlmO19bejIfnLN ) ; Key ID = 37335`
	`TREASURY.GOV. 300 IN DNSKEY ( 256 3 7 AwEAAd5sGp8aGi2Xa37YZEADt4wfKct0Fj8O+H9dUz4Y4vBKWY3jClAEdIkECiToF8gt+KTO2l1M iQZaAri5dAnJFC0V/cdsc9Pd+Wfbx3FOW6Sw2dfPWStWfPhUesrapQulEvg6zyx200edHTyjiYNG hTGVwv+bP2FLnoyO+WWJ0kkt ) ; Key ID = 24527`
	DNSKEY=44076/SEP is now in the chain-of-trust
	DS=44076/SHA-1 verifies DNSKEY=44076/SEP
	DS=44076/SHA-256 verifies DNSKEY=44076/SEP
	DNSKEY=37335/SEP is now in the chain-of-trust
	DS=37335/SHA-256 verifies DNSKEY=37335/SEP
	DS=37335/SHA-1 verifies DNSKEY=37335/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`TREASURY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20191124200944 20191117200944 44076 treasury.gov. oc5S3E8IdiAPgDKIqB4wcqFuVQxkX46BJM8XQTz1lml2sgwlO00bWcTXN3kbcfJUvZ7ANKqdAiib BipYQy3BmMhZ4fYAurSF/BTd8auwGPvJb2oVrkqp6J0Dg/kjUFBiAxsJxQ+y/+yG1jQm2aK1c9ze uZSYVYXeR7ylfclTU7U= )`
	`TREASURY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20191124200944 20191117200944 37335 treasury.gov. aWjzVaBKOqBih1UsW1V8bW+gAMu7LlEK6zWCjTvFVrPVlQyjlu+UkiJ2xsEdtSatC4qfg55pajyR wM+v0RDUi7HVwJwIVk1YlEGilaKPWakiFL1dlW1T/CSuSJo+4EcCuZeYDgXi6eVzohX50pd/s0lh hyH0Qx79Vf498CT3Mkw= )`
	`TREASURY.GOV. 300 IN RRSIG ( DNSKEY 7 2 300 20191124200944 20191117200944 24527 treasury.gov. zw7Mc0qdHmW8zVj4Hy9X9Hl867RJzPB5J0SSTLjVB6DTXL8ECmTcIg4OjEzOsis2k2gtwqkBEcuz blJl8ygri6DAJIG48pXQJ5i77DNm6hFiD5oydCtUF2RO2SzPJxD0LKC+2hN1rqQ/YkJur4ROH56a hY9MNTWKuvdm4Uva3oo= )`
	RRSIG=44076 and DNSKEY=44076/SEP verifies the DNSKEY RRset
	RRSIG=37335 and DNSKEY=37335/SEP verifies the DNSKEY RRset
	RRSIG=24527 and DNSKEY=24527 verifies the DNSKEY RRset
	DNSKEY=24527 is now in the chain-of-trust
	Query to ns3.TREASURY.GOV for TREASURY.GOV/A
	Received 1213 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1213 bytes) ;; HEADER SECTION ;; id = 4582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASURY.GOV. IN A ;; ANSWER SECTION (2 records) TREASURY.GOV. 120 IN A 166.123.218.220 TREASURY.GOV. 120 IN RRSIG ( A 7 2 120 20191120151537 20191113151537 24527 treasury.gov. qzf+meLReYgVkWwAKX4YIW8bC2JctDr8RS6g6ldLoY7a5WBblqIf5LGrQG5gg8I2LCjrD3d2ESOw rgn1ARiFbbg+wBmfgaA3xiHSWEckZFHrhHY57kaCT7XFhuU0ILl/3qWW/QEHRWXvtPj4HjYFTcDk VLRKdS8iormqXHd27/4= ) ;; AUTHORITY SECTION (3 records) TREASURY.GOV. 300 IN NS ns3.TREASURY.GOV. TREASURY.GOV. 300 IN NS ns1.TREASURY.GOV. TREASURY.GOV. 300 IN RRSIG ( NS 7 2 300 20191123010041 20191116010041 24527 treasury.gov. JJ0xy2JbmGqg5GxBGR9r9KLm64oHSxRtz9XkpKeWLhznlF9GYj2IKYQXGj0vU2KPDYG4jq+V6KrY 0qYlQQztDtVvQsQ3fODZ48JxgyrZohAnLfiVt99ZRAPPKxQQt/8rOzNhfgyCOjNjDWBOttURKpnj QmHe6Yex52BPXLPZ7Uc= ) ;; ADDITIONAL SECTION (9 records) ns1.TREASURY.GOV. 300 IN A 166.123.208.249 ns1.TREASURY.GOV. 300 IN RRSIG ( A 7 3 300 20191122025452 20191115025452 24527 treasury.gov. iGlGA0XV4kt5s0mfbtz+aT63AOJDWEaWK3tZ0XJxpvvwCggBpHGvsuH7ZyG2XRKFWhUYkXaPgYla KoUYotzE1pUXxKZiTmBlYpFNn9sbS8Kh5ywrljJojy3/iyRI63mQR8hqbvQrLvJvKtui/b5LiEoO ijJpx4I0YChedDYhmkg= ) ns1.TREASURY.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.TREASURY.GOV. 300 IN RRSIG ( AAAA 7 3 300 20191124111528 20191117111528 24527 treasury.gov. YkHK5j0/yYt7ZSD24flvEoyAFEy6xLcLB7YESQWKow995bE1Gddiuj+5jzfgcNiZb8gYRFq69NT/ ILvk22OGt1bQdJHX/tXLVj2ROAwkk/sLNUU3vmjJHxbAOoDCvzZA+Jmyq3I2lBt/WTIvaH6r+YJL cmW/io/ZXWsxGanI6NQ= ) ns3.TREASURY.GOV. 300 IN A 164.95.95.155 ns3.TREASURY.GOV. 300 IN RRSIG ( A 7 3 300 20191123010014 20191116010014 24527 treasury.gov. DPjln3MWD2aAR68ujGk1koHT3cUgrSFkaFvQtAUi4166HPDq0ZyA1nrHSYOPeyuaoeTDF6Yr8piF T95UhJdvrhxdqq/UKw2+N+AnzMPdEUQ8lAW6jgQT1r3hZn3embduvXy64X5AvVCpzfh00BMODUE6 sE3aq+kPRCP6SIA4un0= ) ns3.TREASURY.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.TREASURY.GOV. 300 IN RRSIG ( AAAA 7 3 300 20191123010135 20191116010135 24527 treasury.gov. m9mDun5QFhSD4acxyoyeEtfeeoP0bbgFtVX6UzV3W0xLc7eEiIYrRUVt2v54Y/8fAAdCQkw5cA4i kiLoRPTov3Uourgs3hOSq7byYZNy7awuisCiGuf5DNcR23Tc6EewqBa9rmtSzU1Ztwel1wEp0tZt kJ2RGIiodKcUvXaVeTM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREASURY.GOV is authoritative for TREASURY.GOV
	Found RRSIG signed by treasury.gov zone
	Query to ns3.TREASURY.GOV for TREASURY.GOV/SOA
	Received 1269 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1269 bytes) ;; HEADER SECTION ;; id = 43171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASURY.GOV. IN SOA ;; ANSWER SECTION (2 records) TREASURY.GOV. 300 IN SOA ( nstsm1.perimeter.bpd.treas.GOV. webadmin.bpd.treas.GOV. 2001178152 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) TREASURY.GOV. 300 IN RRSIG ( SOA 7 2 300 20191124193958 20191117193958 24527 treasury.gov. SMfdLQd/eDpQPMaqejFioY684KGI6E9r5xgn2vfUEDTcHUjrDLM65C0oD51OFdjRYO4ndHpRCcsi ZZ585Wy2iVazqvUgsNcX+h/w7EXndJoGiV3FLBqJbPK3qMwKaABHKPr9ZQpwxOwToYxyzimcqVlt llDEjHuPFQcWSpY8BMM= ) ;; AUTHORITY SECTION (3 records) TREASURY.GOV. 300 IN NS ns1.TREASURY.GOV. TREASURY.GOV. 300 IN NS ns3.TREASURY.GOV. TREASURY.GOV. 300 IN RRSIG ( NS 7 2 300 20191123003157 20191116003157 24527 treasury.gov. bWtrLNJUbhdRc88qTNC50C+aIC8DLXxaBgRyXe714e5lkdyKm+aCMd59ND8+8re73Iz6ZbPmfsVG VsEvTihJlCr77cnO9rvoOSjQKyY25Cv3lmxKIutMYB8jBVGo8nB1yTqp3zWMALrWC5GNd2rq/GvU y67QqevwiMH/4yghHHU= ) ;; ADDITIONAL SECTION (9 records) ns1.TREASURY.GOV. 300 IN A 166.123.208.249 ns1.TREASURY.GOV. 300 IN RRSIG ( A 7 3 300 20191123010534 20191116010534 24527 treasury.gov. CiP9sF1jz83BqEqRbMtjvLy8rMU/wJJMFH2ubSQxDNdyRJDkMHyRFUtmYicUmJ/MhjnKK7sM+MKK Zosf7RRMe3EpGbjBv7YCyRW9xWFuMeR+1vDslDWCCtnxvHhczRfFsyulqGqlfUirr+RYh+zypG/k /dJwJ+RLwG4wf7Z0/go= ) ns1.TREASURY.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.TREASURY.GOV. 300 IN RRSIG ( AAAA 7 3 300 20191123010002 20191116010002 24527 treasury.gov. y2KPZxr/rbzQmmMFJRJkBcQzgh1B/J2adlxjqPOOzODDRMi30MDWl5v9Szs7G4dl0t8FvZsqAseJ LdeGhTsrOZ8zRSHtBROf3XFd3KsWlGpuV75WO2PnVFNFJSm9V0utEdvU3wBF4dtNDo7wxLUrKi3c mqyShk37g1jp0EwuQ44= ) ns3.TREASURY.GOV. 300 IN A 164.95.95.155 ns3.TREASURY.GOV. 300 IN RRSIG ( A 7 3 300 20191120151408 20191113151408 24527 treasury.gov. ljNaxiG8qhkpA0GkklTySbFx64nA9vd6RmfLUl+Kr5kIA7IcBxupieMMjeKmiI3c3wuFm4ZGbetz 4SveauvozJGB8itmH+wBtQ96UZ/kodkJvP5L1rJpUOn9vJjWheF3iaIjcD6hF2r6j+LVFuxCQXCF vAurW5QsDcnvvzGojco= ) ns3.TREASURY.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.TREASURY.GOV. 300 IN RRSIG ( AAAA 7 3 300 20191123001859 20191116001859 24527 treasury.gov. X80uo9eCdAU5+3gBy/oW5r/qUAd/FxxX23IXuN5MwwOhxnHjYq6cBX2fhdBNftalG2lWs+pgXrU8 G2WnPgCWWLudqacJc5+1oTQOYBBdfdJAZjCZwygE0wHCpbXtbiTfxuURonwgVGWoJ0vslxfvUGAT qw0qwqmo1Z5ASgkbEuI= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.TREASURY.GOV for TREASURY.GOV/SOA
	Received 1269 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1269 bytes) ;; HEADER SECTION ;; id = 2196 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASURY.GOV. IN SOA ;; ANSWER SECTION (2 records) TREASURY.GOV. 300 IN SOA ( nstsm1.perimeter.bpd.treas.GOV. webadmin.bpd.treas.GOV. 2001178152 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) TREASURY.GOV. 300 IN RRSIG ( SOA 7 2 300 20191124193958 20191117193958 24527 treasury.gov. SMfdLQd/eDpQPMaqejFioY684KGI6E9r5xgn2vfUEDTcHUjrDLM65C0oD51OFdjRYO4ndHpRCcsi ZZ585Wy2iVazqvUgsNcX+h/w7EXndJoGiV3FLBqJbPK3qMwKaABHKPr9ZQpwxOwToYxyzimcqVlt llDEjHuPFQcWSpY8BMM= ) ;; AUTHORITY SECTION (3 records) TREASURY.GOV. 300 IN NS ns1.TREASURY.GOV. TREASURY.GOV. 300 IN NS ns3.TREASURY.GOV. TREASURY.GOV. 300 IN RRSIG ( NS 7 2 300 20191122104153 20191115104153 24527 treasury.gov. amcLqbCyzF6pp76mslI9Sb/8Gu8Q7PvPxRihID1vS8FQrkrl8/5l0xudLm+RsyQlt+jsJGDAbbM4 CZiaBViu2nChuP8rKWBiW8d4HJHjHPqtMAqEs00aO1ax/72Ltn8HuPQ7l5UOQLmCExaJeWPAJJgN 7+tEvwBV8beuESClr4E= ) ;; ADDITIONAL SECTION (9 records) ns1.TREASURY.GOV. 300 IN A 166.123.208.249 ns1.TREASURY.GOV. 300 IN RRSIG ( A 7 3 300 20191120151530 20191113151530 24527 treasury.gov. tpM6G+YdaqvXztUY7fN/YO1C7hvVi14mXQE0om/7l8mp4aHFDMWMh9NX50biTkNYHNSxcgrOr2IZ ymuzdLeu82eE8+X45b+4XbC5HWN/av0bYyavMdGcOxB6wBsjJfxJhvuIWV5U9rXWlUL8B3/U3RlX qezZV5o0tjD6gW/f/Rs= ) ns1.TREASURY.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.TREASURY.GOV. 300 IN RRSIG ( AAAA 7 3 300 20191122114406 20191115114406 24527 treasury.gov. WqVHKHMfxBTKe/JcUi+ivkQ8fFxJHY1afiqX3JVGAEsCfk//xk+5/sPDLoYYbJDbtr0RcXLnxI8B MTkBeDKpcuOV6nxZswtZ04lLklnjyQoEnfSPVE463jAwhTC0kbLcrtzL33AjyDz0Rbbdi6bYcGrt bd7OhyqLMLhTnov5Wvk= ) ns3.TREASURY.GOV. 300 IN A 164.95.95.155 ns3.TREASURY.GOV. 300 IN RRSIG ( A 7 3 300 20191122025520 20191115025520 24527 treasury.gov. oLiPm5WZ4XyezEhfMUCT65oG77zKL+bxO6zUKZpkgdfnIZB9nUBcH0x+GHgULww1Pc1U/heWzzB8 8taQvOls3hVwzH+TxtMgDn2y+OtGgnIXwW+1NChTT2Lc1CUiNfq4oUlqo8yvK6qIT7nUTuZCKBCi VWRY7TQwBTn6xfXxGN0= ) ns3.TREASURY.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.TREASURY.GOV. 300 IN RRSIG ( AAAA 7 3 300 20191122105503 20191115105503 24527 treasury.gov. G52Fp4TMObbukUoso2ariFG9ZY4d1ZU3deT9mwURXheo7fSD+KhL4OSblnvNDC7unR0dNWval6Ve Nr7M8ogq7uXHjsb7p1VqjdHQazNY0vW1fE2yc2zwVkfaFU6zPGPGZZdc8+hvu93pTi8TnYLB2h8C CiX2Sbke2wxP9LLhgso= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.TREASURY.GOV for TREASURY.GOV/A
	Received 1213 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1213 bytes) ;; HEADER SECTION ;; id = 48289 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASURY.GOV. IN A ;; ANSWER SECTION (2 records) TREASURY.GOV. 120 IN A 166.123.218.220 TREASURY.GOV. 120 IN RRSIG ( A 7 2 120 20191120151537 20191113151537 24527 treasury.gov. qzf+meLReYgVkWwAKX4YIW8bC2JctDr8RS6g6ldLoY7a5WBblqIf5LGrQG5gg8I2LCjrD3d2ESOw rgn1ARiFbbg+wBmfgaA3xiHSWEckZFHrhHY57kaCT7XFhuU0ILl/3qWW/QEHRWXvtPj4HjYFTcDk VLRKdS8iormqXHd27/4= ) ;; AUTHORITY SECTION (3 records) TREASURY.GOV. 300 IN NS ns1.TREASURY.GOV. TREASURY.GOV. 300 IN NS ns3.TREASURY.GOV. TREASURY.GOV. 300 IN RRSIG ( NS 7 2 300 20191123010041 20191116010041 24527 treasury.gov. JJ0xy2JbmGqg5GxBGR9r9KLm64oHSxRtz9XkpKeWLhznlF9GYj2IKYQXGj0vU2KPDYG4jq+V6KrY 0qYlQQztDtVvQsQ3fODZ48JxgyrZohAnLfiVt99ZRAPPKxQQt/8rOzNhfgyCOjNjDWBOttURKpnj QmHe6Yex52BPXLPZ7Uc= ) ;; ADDITIONAL SECTION (9 records) ns1.TREASURY.GOV. 300 IN A 166.123.208.249 ns1.TREASURY.GOV. 300 IN RRSIG ( A 7 3 300 20191122025452 20191115025452 24527 treasury.gov. iGlGA0XV4kt5s0mfbtz+aT63AOJDWEaWK3tZ0XJxpvvwCggBpHGvsuH7ZyG2XRKFWhUYkXaPgYla KoUYotzE1pUXxKZiTmBlYpFNn9sbS8Kh5ywrljJojy3/iyRI63mQR8hqbvQrLvJvKtui/b5LiEoO ijJpx4I0YChedDYhmkg= ) ns1.TREASURY.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.TREASURY.GOV. 300 IN RRSIG ( AAAA 7 3 300 20191124111528 20191117111528 24527 treasury.gov. YkHK5j0/yYt7ZSD24flvEoyAFEy6xLcLB7YESQWKow995bE1Gddiuj+5jzfgcNiZb8gYRFq69NT/ ILvk22OGt1bQdJHX/tXLVj2ROAwkk/sLNUU3vmjJHxbAOoDCvzZA+Jmyq3I2lBt/WTIvaH6r+YJL cmW/io/ZXWsxGanI6NQ= ) ns3.TREASURY.GOV. 300 IN A 164.95.95.155 ns3.TREASURY.GOV. 300 IN RRSIG ( A 7 3 300 20191123010014 20191116010014 24527 treasury.gov. DPjln3MWD2aAR68ujGk1koHT3cUgrSFkaFvQtAUi4166HPDq0ZyA1nrHSYOPeyuaoeTDF6Yr8piF T95UhJdvrhxdqq/UKw2+N+AnzMPdEUQ8lAW6jgQT1r3hZn3embduvXy64X5AvVCpzfh00BMODUE6 sE3aq+kPRCP6SIA4un0= ) ns3.TREASURY.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.TREASURY.GOV. 300 IN RRSIG ( AAAA 7 3 300 20191123010135 20191116010135 24527 treasury.gov. m9mDun5QFhSD4acxyoyeEtfeeoP0bbgFtVX6UzV3W0xLc7eEiIYrRUVt2v54Y/8fAAdCQkw5cA4i kiLoRPTov3Uourgs3hOSq7byYZNy7awuisCiGuf5DNcR23Tc6EewqBa9rmtSzU1Ztwel1wEp0tZt kJ2RGIiodKcUvXaVeTM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREASURY.GOV A RR has value 166.123.218.220
	Found 1 RRSIGs over A RRset
	`TREASURY.GOV. 120 IN RRSIG ( A 7 2 120 20191120151537 20191113151537 24527 treasury.gov. qzf+meLReYgVkWwAKX4YIW8bC2JctDr8RS6g6ldLoY7a5WBblqIf5LGrQG5gg8I2LCjrD3d2ESOw rgn1ARiFbbg+wBmfgaA3xiHSWEckZFHrhHY57kaCT7XFhuU0ILl/3qWW/QEHRWXvtPj4HjYFTcDk VLRKdS8iormqXHd27/4= )`
	RRSIG=24527 and DNSKEY=24527 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TREASURY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: