DNSSEC Analyzer - USCURRENCY.GOV

Domain Name:

Time: 2020-10-26 13:15:17 UTC, NTP stratum 4

Analyzing DNSSEC problems for USCURRENCY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 54440 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to c.root-servers.net for USCURRENCY.GOV/A
	Received 672 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (672 bytes) ;; HEADER SECTION ;; id = 34455 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (658 bytes) ;; HEADER SECTION ;; id = 18821 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 406 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (406 bytes) ;; HEADER SECTION ;; id = 31086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 46234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to b.gov-servers.net for USCURRENCY.GOV/A
	Received 407 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (407 bytes) ;; HEADER SECTION ;; id = 9569 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) USCURRENCY.GOV. 86400 IN NS a10-65.akam.net. USCURRENCY.GOV. 86400 IN NS a16-67.akam.net. USCURRENCY.GOV. 86400 IN NS a5-65.akam.net. USCURRENCY.GOV. 86400 IN NS a28-64.akam.net. USCURRENCY.GOV. 86400 IN NS a1-166.akam.net. USCURRENCY.GOV. 86400 IN NS a11-66.akam.net. USCURRENCY.GOV. 3600 IN DS ( 56554 8 1 dcee626e290ed8c716f144676508a62e9d78a88f ) USCURRENCY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. OFeUP72yG9le/16C8uLQljx8w0jTaVmH+conmqbPMO4tAMt/PIDGVqEmLOWx9ZYBlS7qJ3aKB3vF b0xQFIXBfIkd07RfeCi63e4TFyZsxG68jPJnJYpGcjPQHr6i4U8Zqj26DxC+WCZBLmLZKBMuMGRp voLriN2L1UOrWeBK1m/zl+fpeVAghU32eJcPY1LkCGsDylXR5CxMrFxifCnDZQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for USCURRENCY.GOV/DNSKEY
	Received 407 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (407 bytes) ;; HEADER SECTION ;; id = 61163 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) USCURRENCY.GOV. 86400 IN NS a10-65.akam.net. USCURRENCY.GOV. 86400 IN NS a16-67.akam.net. USCURRENCY.GOV. 86400 IN NS a5-65.akam.net. USCURRENCY.GOV. 86400 IN NS a28-64.akam.net. USCURRENCY.GOV. 86400 IN NS a1-166.akam.net. USCURRENCY.GOV. 86400 IN NS a11-66.akam.net. USCURRENCY.GOV. 3600 IN DS ( 56554 8 1 dcee626e290ed8c716f144676508a62e9d78a88f ) USCURRENCY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. OFeUP72yG9le/16C8uLQljx8w0jTaVmH+conmqbPMO4tAMt/PIDGVqEmLOWx9ZYBlS7qJ3aKB3vF b0xQFIXBfIkd07RfeCi63e4TFyZsxG68jPJnJYpGcjPQHr6i4U8Zqj26DxC+WCZBLmLZKBMuMGRp voLriN2L1UOrWeBK1m/zl+fpeVAghU32eJcPY1LkCGsDylXR5CxMrFxifCnDZQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone USCURRENCY.GOV

USCURRENCY.GOV

	Checking DS between GOV and USCURRENCY.GOV
	Query to d.gov-servers.net for USCURRENCY.GOV/DS
	Received 274 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (274 bytes) ;; HEADER SECTION ;; id = 43182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN DS ;; ANSWER SECTION (2 records) USCURRENCY.GOV. 3600 IN DS ( 56554 8 1 dcee626e290ed8c716f144676508a62e9d78a88f ) USCURRENCY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. OFeUP72yG9le/16C8uLQljx8w0jTaVmH+conmqbPMO4tAMt/PIDGVqEmLOWx9ZYBlS7qJ3aKB3vF b0xQFIXBfIkd07RfeCi63e4TFyZsxG68jPJnJYpGcjPQHr6i4U8Zqj26DxC+WCZBLmLZKBMuMGRp voLriN2L1UOrWeBK1m/zl+fpeVAghU32eJcPY1LkCGsDylXR5CxMrFxifCnDZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for USCURRENCY.GOV in the GOV zone
	DS=56554/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`USCURRENCY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. OFeUP72yG9le/16C8uLQljx8w0jTaVmH+conmqbPMO4tAMt/PIDGVqEmLOWx9ZYBlS7qJ3aKB3vF b0xQFIXBfIkd07RfeCi63e4TFyZsxG68jPJnJYpGcjPQHr6i4U8Zqj26DxC+WCZBLmLZKBMuMGRp voLriN2L1UOrWeBK1m/zl+fpeVAghU32eJcPY1LkCGsDylXR5CxMrFxifCnDZQ== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=56554/SHA-1 is now in the chain-of-trust
	`USCURRENCY.GOV. 3600 IN DS ( 56554 8 1 dcee626e290ed8c716f144676508a62e9d78a88f )`
	Query to a28-64.akam.net for USCURRENCY.GOV/DNSKEY
	Received 1494 bytes from 95.100.173.64
	;; Answer received from 95.100.173.64 (1494 bytes) ;; HEADER SECTION ;; id = 17687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) USCURRENCY.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAefJyxdvZDjq+bxpOAENCvhlNSrnzNz9p/770diOZHZ6z1frDDRe6F8c/EBgpcRxdkzHzdM5 /GB6sQrZvYT5XPoM4tauC/jrbwHDTMisLb9qNyNOfKiB8mUxoRQZaW5QgIh5X9jOtCq0ht6SgHau fhr+h1etaV4uMykeTs2VNE3t ) ; Key ID = 23830 USCURRENCY.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAbzc2X2AwKIUVu9decjYnZN4mB46QzzuyYbz8yYtgm/Nb1efnJZ1wiK4eI+AhfsAbsWgraZP 3QIa/mA5L8vmSFHN2KhbTRkt5oSkR8rpVDuWU6yJxjzbYhqy6uf391UFMU3/nK48L9s1KCmPfE9u 2eixGiQYQZ2IgqpfDmu7mRDXT0q+jE8QvpArR5a0Ws/PeluG5yIya44jQzzFY5hUMybfCvSrW35B qrt9iJnbmHX63w+TvRkKzmUntADNzbBT1xJePXeiQPOf1kcd3kPNkJ0cvHpsaWj+OpkDfr6dJX5y eGxnHwE3jelvO6P44D5v+VL16pV12c+uGF1sERiBYVs= ) ; Key ID = 48652 USCURRENCY.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAao044mumAXPn9PIpU+1aukd/qYcDiebqZBkMvpzCziG7pSr0YkE64Cvk3i+4og0sVrjCa3O MO7Svlmn+L3g1heyk39hemW83XzJVVUeR95WFC0G5oLPYJQ38PW5AkWt173ZBb+iFMz1Tj1ZCuGp OQTZB7jkauP4sX/FlRPdMPjF ) ; Key ID = 40089 USCURRENCY.GOV. 7200 IN DNSKEY ( 257 3 8 Av//vb7qM64BB2tx6l8BS9FSwc4CEATMu/DJnwzEwkDziKGGWnrWc4GVxClTSfufj4VEaHGxYuNe vCYvJWtPCvJ8W0/7tnkC8zeEKzh2CZ+Eb1rttkuEDmCROUj1nuOpG9ZLCvdrbrSspTCkq6r3RHPH VrKFysftSy45fmmPBC2H76NvoMgDEVwbXXCNACjDdU+7hzGookrIZ2bJS10lfpKDRW5BqPDG/sP4 lnqqht40mvbksoDirdl18AeFmAbwwYZ1Bwdqy347ycicsaM9QFeW/o+TvhGxClnwnMLiG4cRrA7D /2w8E4urY9Meo8Q/opUXKIWbxXG1d7Lpf0hOrLAcVw== ) ; Key ID = 56554 USCURRENCY.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20201028233206 20201025223206 56554 uscurrency.gov. obNjEknD9JhE7W6b0Bn8UvELdTXszHhB6PwSCmOzcsNMbg23xvazUDtGRe4Qm+bBAQiHPNT33jEF AZYr41WqYxyfr+79AEpZgEXKOFudOeFLF7kif8/TGLTmYgl9m/tIjykmMz3Of6rWl/uTj9Z/Fyl2 6tOJalkP+uuStmWpvpBwmKKMpAb7WUWpetb2jmywpCwWraV+GUSqE24+aEpQVWxJkuSMbq9NdRP8 6CFJgztT1iXFhhEJdzHcJaxQoxtSrQDSy+FksVFZoBwG2LDZ6zBhKnOc/ckVp+iCCX8uiYa/ELuL yOSqvOEqubg+LgIrAGYEOw4o4YKlJBWWb4WBYw== ) USCURRENCY.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20201028233206 20201025223206 48652 uscurrency.gov. ok8p1I4P6rA5D4LRdHfNinJrhCRupVBPIud5QU5EcTeQQbBJXJJh0tR5IouI4b4rlOE5DQ7D0ZeC yc2tiHnYqiMato2//DiarCwsa+TccWKiZysas7CDBMsaA0LTQ9lhz1tIgF00t2SIhGTh7Zl3vc5B 9ym6Nkvi5uBzRNojqwPIJOWqoXVNf5iWklb9m3ur0XwfU7LerbdmRvUaCz+/q8KLN+F9eWy5hwfK QymnFOfLuRP230c309hXvf6kOs93NkSN3fwV05tiMhLpliSUnveSfYfqXffOpiAeunPwrtHTrIAw S4kKyZC2x6yHHXx2yB2LbkuXKSl8UXEaM63Q3w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for USCURRENCY.GOV
	`USCURRENCY.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAefJyxdvZDjq+bxpOAENCvhlNSrnzNz9p/770diOZHZ6z1frDDRe6F8c/EBgpcRxdkzHzdM5 /GB6sQrZvYT5XPoM4tauC/jrbwHDTMisLb9qNyNOfKiB8mUxoRQZaW5QgIh5X9jOtCq0ht6SgHau fhr+h1etaV4uMykeTs2VNE3t ) ; Key ID = 23830`
	`USCURRENCY.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAbzc2X2AwKIUVu9decjYnZN4mB46QzzuyYbz8yYtgm/Nb1efnJZ1wiK4eI+AhfsAbsWgraZP 3QIa/mA5L8vmSFHN2KhbTRkt5oSkR8rpVDuWU6yJxjzbYhqy6uf391UFMU3/nK48L9s1KCmPfE9u 2eixGiQYQZ2IgqpfDmu7mRDXT0q+jE8QvpArR5a0Ws/PeluG5yIya44jQzzFY5hUMybfCvSrW35B qrt9iJnbmHX63w+TvRkKzmUntADNzbBT1xJePXeiQPOf1kcd3kPNkJ0cvHpsaWj+OpkDfr6dJX5y eGxnHwE3jelvO6P44D5v+VL16pV12c+uGF1sERiBYVs= ) ; Key ID = 48652`
	`USCURRENCY.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAao044mumAXPn9PIpU+1aukd/qYcDiebqZBkMvpzCziG7pSr0YkE64Cvk3i+4og0sVrjCa3O MO7Svlmn+L3g1heyk39hemW83XzJVVUeR95WFC0G5oLPYJQ38PW5AkWt173ZBb+iFMz1Tj1ZCuGp OQTZB7jkauP4sX/FlRPdMPjF ) ; Key ID = 40089`
	`USCURRENCY.GOV. 7200 IN DNSKEY ( 257 3 8 Av//vb7qM64BB2tx6l8BS9FSwc4CEATMu/DJnwzEwkDziKGGWnrWc4GVxClTSfufj4VEaHGxYuNe vCYvJWtPCvJ8W0/7tnkC8zeEKzh2CZ+Eb1rttkuEDmCROUj1nuOpG9ZLCvdrbrSspTCkq6r3RHPH VrKFysftSy45fmmPBC2H76NvoMgDEVwbXXCNACjDdU+7hzGookrIZ2bJS10lfpKDRW5BqPDG/sP4 lnqqht40mvbksoDirdl18AeFmAbwwYZ1Bwdqy347ycicsaM9QFeW/o+TvhGxClnwnMLiG4cRrA7D /2w8E4urY9Meo8Q/opUXKIWbxXG1d7Lpf0hOrLAcVw== ) ; Key ID = 56554`
	DNSKEY=56554/SEP is now in the chain-of-trust
	DS=56554/SHA-1 verifies DNSKEY=56554/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`USCURRENCY.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20201028233206 20201025223206 56554 uscurrency.gov. obNjEknD9JhE7W6b0Bn8UvELdTXszHhB6PwSCmOzcsNMbg23xvazUDtGRe4Qm+bBAQiHPNT33jEF AZYr41WqYxyfr+79AEpZgEXKOFudOeFLF7kif8/TGLTmYgl9m/tIjykmMz3Of6rWl/uTj9Z/Fyl2 6tOJalkP+uuStmWpvpBwmKKMpAb7WUWpetb2jmywpCwWraV+GUSqE24+aEpQVWxJkuSMbq9NdRP8 6CFJgztT1iXFhhEJdzHcJaxQoxtSrQDSy+FksVFZoBwG2LDZ6zBhKnOc/ckVp+iCCX8uiYa/ELuL yOSqvOEqubg+LgIrAGYEOw4o4YKlJBWWb4WBYw== )`
	`USCURRENCY.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20201028233206 20201025223206 48652 uscurrency.gov. ok8p1I4P6rA5D4LRdHfNinJrhCRupVBPIud5QU5EcTeQQbBJXJJh0tR5IouI4b4rlOE5DQ7D0ZeC yc2tiHnYqiMato2//DiarCwsa+TccWKiZysas7CDBMsaA0LTQ9lhz1tIgF00t2SIhGTh7Zl3vc5B 9ym6Nkvi5uBzRNojqwPIJOWqoXVNf5iWklb9m3ur0XwfU7LerbdmRvUaCz+/q8KLN+F9eWy5hwfK QymnFOfLuRP230c309hXvf6kOs93NkSN3fwV05tiMhLpliSUnveSfYfqXffOpiAeunPwrtHTrIAw S4kKyZC2x6yHHXx2yB2LbkuXKSl8UXEaM63Q3w== )`
	RRSIG=56554 and DNSKEY=56554/SEP verifies the DNSKEY RRset
	RRSIG=48652 and DNSKEY=48652/SEP verifies the DNSKEY RRset
	DNSKEY=23830 is now in the chain-of-trust
	DNSKEY=48652/SEP is now in the chain-of-trust
	DNSKEY=40089 is now in the chain-of-trust
	Query to a5-65.akam.net for USCURRENCY.GOV/A
	Received 281 bytes from 95.100.168.65
	;; Answer received from 95.100.168.65 (281 bytes) ;; HEADER SECTION ;; id = 13566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN A ;; ANSWER SECTION (5 records) USCURRENCY.GOV. 60 IN A 13.226.210.127 USCURRENCY.GOV. 60 IN A 13.226.210.16 USCURRENCY.GOV. 60 IN A 13.226.210.69 USCURRENCY.GOV. 60 IN A 13.226.210.78 USCURRENCY.GOV. 60 IN RRSIG ( A 8 2 60 20201028233206 20201025223206 40089 uscurrency.gov. YaqkUxxcpm6hlWOV67RUIdivdfI87cN3u5DxEwASOzDHqvWDos5NgVuY/1QGdj42Xkse7ZqdkIej rbczFV/Zax1c9guhWI8yF1cp/U1N7XtCvJ6mMuLu82SDZh0vBhtmzs7TLp1PRBXbNMaaJsXaut3f gsjLM9G2nsMjCLIn7+g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	USCURRENCY.GOV is authoritative for USCURRENCY.GOV
	Found RRSIG signed by uscurrency.gov zone
	Query to a1-166.akam.net for USCURRENCY.GOV/SOA
	Received 575 bytes from 193.108.91.166
	;; Answer received from 193.108.91.166 (575 bytes) ;; HEADER SECTION ;; id = 60759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN SOA ;; ANSWER SECTION (2 records) USCURRENCY.GOV. 3600 IN SOA ( a5-65.akam.net. hostmaster.frb.GOV. 2015033164 ;serial 3600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) USCURRENCY.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. epSUkB8hhaz4GUkOsOzgMtkVbjZa1D0IXE1DF0DhB4Iom2hjBpXgYqv+P9B4fgauVJBymOiFMnP9 D2vfuOf3IK1kcnUZizcjDIkWGPjaMpj2xTWt2ytPvkljC5vkV1D7dAgxWBEkFpamkNEyBSLbQLN5 QYROSUCSdmYpex3oe1s= ) ;; AUTHORITY SECTION (7 records) USCURRENCY.GOV. 3600 IN NS a11-66.akam.net. USCURRENCY.GOV. 3600 IN NS a1-166.akam.net. USCURRENCY.GOV. 3600 IN NS a16-67.akam.net. USCURRENCY.GOV. 3600 IN NS a28-64.akam.net. USCURRENCY.GOV. 3600 IN NS a5-65.akam.net. USCURRENCY.GOV. 3600 IN NS a10-65.akam.net. USCURRENCY.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. Df/cWRSpSVLA7ilGz3Ak/ALN51A2TSjOwaGISP7+Zu8daA34d08uFbbYF3iE5htN+IrOodI40QMZ NKIyaUQfk7k8OGJgJcAzUHh5RJBFe8e1W/N5C1m/EbiYRKa7sh6iW1US/ruGOgTwXeFVlgG8wvID WAXBN8P1kgHgIV5EPfM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a11-66.akam.net for USCURRENCY.GOV/SOA
	Received 575 bytes from 84.53.139.66
	;; Answer received from 84.53.139.66 (575 bytes) ;; HEADER SECTION ;; id = 6244 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN SOA ;; ANSWER SECTION (2 records) USCURRENCY.GOV. 3600 IN SOA ( a5-65.akam.net. hostmaster.frb.GOV. 2015033164 ;serial 3600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) USCURRENCY.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. epSUkB8hhaz4GUkOsOzgMtkVbjZa1D0IXE1DF0DhB4Iom2hjBpXgYqv+P9B4fgauVJBymOiFMnP9 D2vfuOf3IK1kcnUZizcjDIkWGPjaMpj2xTWt2ytPvkljC5vkV1D7dAgxWBEkFpamkNEyBSLbQLN5 QYROSUCSdmYpex3oe1s= ) ;; AUTHORITY SECTION (7 records) USCURRENCY.GOV. 3600 IN NS a1-166.akam.net. USCURRENCY.GOV. 3600 IN NS a5-65.akam.net. USCURRENCY.GOV. 3600 IN NS a10-65.akam.net. USCURRENCY.GOV. 3600 IN NS a16-67.akam.net. USCURRENCY.GOV. 3600 IN NS a11-66.akam.net. USCURRENCY.GOV. 3600 IN NS a28-64.akam.net. USCURRENCY.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. Df/cWRSpSVLA7ilGz3Ak/ALN51A2TSjOwaGISP7+Zu8daA34d08uFbbYF3iE5htN+IrOodI40QMZ NKIyaUQfk7k8OGJgJcAzUHh5RJBFe8e1W/N5C1m/EbiYRKa7sh6iW1US/ruGOgTwXeFVlgG8wvID WAXBN8P1kgHgIV5EPfM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a16-67.akam.net for USCURRENCY.GOV/SOA
	Received 575 bytes from 23.211.132.67
	;; Answer received from 23.211.132.67 (575 bytes) ;; HEADER SECTION ;; id = 6207 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN SOA ;; ANSWER SECTION (2 records) USCURRENCY.GOV. 3600 IN SOA ( a5-65.akam.net. hostmaster.frb.GOV. 2015033164 ;serial 3600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) USCURRENCY.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. epSUkB8hhaz4GUkOsOzgMtkVbjZa1D0IXE1DF0DhB4Iom2hjBpXgYqv+P9B4fgauVJBymOiFMnP9 D2vfuOf3IK1kcnUZizcjDIkWGPjaMpj2xTWt2ytPvkljC5vkV1D7dAgxWBEkFpamkNEyBSLbQLN5 QYROSUCSdmYpex3oe1s= ) ;; AUTHORITY SECTION (7 records) USCURRENCY.GOV. 3600 IN NS a1-166.akam.net. USCURRENCY.GOV. 3600 IN NS a10-65.akam.net. USCURRENCY.GOV. 3600 IN NS a28-64.akam.net. USCURRENCY.GOV. 3600 IN NS a11-66.akam.net. USCURRENCY.GOV. 3600 IN NS a16-67.akam.net. USCURRENCY.GOV. 3600 IN NS a5-65.akam.net. USCURRENCY.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. Df/cWRSpSVLA7ilGz3Ak/ALN51A2TSjOwaGISP7+Zu8daA34d08uFbbYF3iE5htN+IrOodI40QMZ NKIyaUQfk7k8OGJgJcAzUHh5RJBFe8e1W/N5C1m/EbiYRKa7sh6iW1US/ruGOgTwXeFVlgG8wvID WAXBN8P1kgHgIV5EPfM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a28-64.akam.net for USCURRENCY.GOV/SOA
	Received 575 bytes from 95.100.173.64
	;; Answer received from 95.100.173.64 (575 bytes) ;; HEADER SECTION ;; id = 48320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN SOA ;; ANSWER SECTION (2 records) USCURRENCY.GOV. 3600 IN SOA ( a5-65.akam.net. hostmaster.frb.GOV. 2015033164 ;serial 3600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) USCURRENCY.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. epSUkB8hhaz4GUkOsOzgMtkVbjZa1D0IXE1DF0DhB4Iom2hjBpXgYqv+P9B4fgauVJBymOiFMnP9 D2vfuOf3IK1kcnUZizcjDIkWGPjaMpj2xTWt2ytPvkljC5vkV1D7dAgxWBEkFpamkNEyBSLbQLN5 QYROSUCSdmYpex3oe1s= ) ;; AUTHORITY SECTION (7 records) USCURRENCY.GOV. 3600 IN NS a5-65.akam.net. USCURRENCY.GOV. 3600 IN NS a28-64.akam.net. USCURRENCY.GOV. 3600 IN NS a11-66.akam.net. USCURRENCY.GOV. 3600 IN NS a1-166.akam.net. USCURRENCY.GOV. 3600 IN NS a10-65.akam.net. USCURRENCY.GOV. 3600 IN NS a16-67.akam.net. USCURRENCY.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. Df/cWRSpSVLA7ilGz3Ak/ALN51A2TSjOwaGISP7+Zu8daA34d08uFbbYF3iE5htN+IrOodI40QMZ NKIyaUQfk7k8OGJgJcAzUHh5RJBFe8e1W/N5C1m/EbiYRKa7sh6iW1US/ruGOgTwXeFVlgG8wvID WAXBN8P1kgHgIV5EPfM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a10-65.akam.net for USCURRENCY.GOV/SOA
	Received 575 bytes from 96.7.50.65
	;; Answer received from 96.7.50.65 (575 bytes) ;; HEADER SECTION ;; id = 55098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN SOA ;; ANSWER SECTION (2 records) USCURRENCY.GOV. 3600 IN SOA ( a5-65.akam.net. hostmaster.frb.GOV. 2015033164 ;serial 3600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) USCURRENCY.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. epSUkB8hhaz4GUkOsOzgMtkVbjZa1D0IXE1DF0DhB4Iom2hjBpXgYqv+P9B4fgauVJBymOiFMnP9 D2vfuOf3IK1kcnUZizcjDIkWGPjaMpj2xTWt2ytPvkljC5vkV1D7dAgxWBEkFpamkNEyBSLbQLN5 QYROSUCSdmYpex3oe1s= ) ;; AUTHORITY SECTION (7 records) USCURRENCY.GOV. 3600 IN NS a11-66.akam.net. USCURRENCY.GOV. 3600 IN NS a5-65.akam.net. USCURRENCY.GOV. 3600 IN NS a1-166.akam.net. USCURRENCY.GOV. 3600 IN NS a16-67.akam.net. USCURRENCY.GOV. 3600 IN NS a28-64.akam.net. USCURRENCY.GOV. 3600 IN NS a10-65.akam.net. USCURRENCY.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. Df/cWRSpSVLA7ilGz3Ak/ALN51A2TSjOwaGISP7+Zu8daA34d08uFbbYF3iE5htN+IrOodI40QMZ NKIyaUQfk7k8OGJgJcAzUHh5RJBFe8e1W/N5C1m/EbiYRKa7sh6iW1US/ruGOgTwXeFVlgG8wvID WAXBN8P1kgHgIV5EPfM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a5-65.akam.net for USCURRENCY.GOV/SOA
	Received 575 bytes from 95.100.168.65
	;; Answer received from 95.100.168.65 (575 bytes) ;; HEADER SECTION ;; id = 3190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN SOA ;; ANSWER SECTION (2 records) USCURRENCY.GOV. 3600 IN SOA ( a5-65.akam.net. hostmaster.frb.GOV. 2015033164 ;serial 3600 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) USCURRENCY.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. epSUkB8hhaz4GUkOsOzgMtkVbjZa1D0IXE1DF0DhB4Iom2hjBpXgYqv+P9B4fgauVJBymOiFMnP9 D2vfuOf3IK1kcnUZizcjDIkWGPjaMpj2xTWt2ytPvkljC5vkV1D7dAgxWBEkFpamkNEyBSLbQLN5 QYROSUCSdmYpex3oe1s= ) ;; AUTHORITY SECTION (7 records) USCURRENCY.GOV. 3600 IN NS a11-66.akam.net. USCURRENCY.GOV. 3600 IN NS a5-65.akam.net. USCURRENCY.GOV. 3600 IN NS a16-67.akam.net. USCURRENCY.GOV. 3600 IN NS a28-64.akam.net. USCURRENCY.GOV. 3600 IN NS a1-166.akam.net. USCURRENCY.GOV. 3600 IN NS a10-65.akam.net. USCURRENCY.GOV. 3600 IN RRSIG ( NS 8 2 3600 20201028233206 20201025223206 40089 uscurrency.gov. Df/cWRSpSVLA7ilGz3Ak/ALN51A2TSjOwaGISP7+Zu8daA34d08uFbbYF3iE5htN+IrOodI40QMZ NKIyaUQfk7k8OGJgJcAzUHh5RJBFe8e1W/N5C1m/EbiYRKa7sh6iW1US/ruGOgTwXeFVlgG8wvID WAXBN8P1kgHgIV5EPfM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a5-65.akam.net for USCURRENCY.GOV/A
	Received 281 bytes from 95.100.168.65
	;; Answer received from 95.100.168.65 (281 bytes) ;; HEADER SECTION ;; id = 51073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCURRENCY.GOV. IN A ;; ANSWER SECTION (5 records) USCURRENCY.GOV. 60 IN A 13.226.36.78 USCURRENCY.GOV. 60 IN A 13.226.36.57 USCURRENCY.GOV. 60 IN A 13.226.36.43 USCURRENCY.GOV. 60 IN A 13.226.36.25 USCURRENCY.GOV. 60 IN RRSIG ( A 8 2 60 20201028233206 20201025223206 40089 uscurrency.gov. nBHThDWlX4cQm+JRFP3X3ABr3Brv6HPfXJflP79C5FWG6WOP+UV6vy19bCOhiokEw8OC3NMwHvyQ mByNX85NJC7FppOXrFb1XVYJACvKcBseuZK5QgOsUcjOkFhPgXSHk7VpLgN1bLly2Mb545OZ+IKt 3OYOQG82PzahHWnA5Qk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	USCURRENCY.GOV A RR has value 13.226.36.78
	USCURRENCY.GOV A RR has value 13.226.36.57
	USCURRENCY.GOV A RR has value 13.226.36.43
	USCURRENCY.GOV A RR has value 13.226.36.25
	Found 1 RRSIGs over A RRset
	`USCURRENCY.GOV. 60 IN RRSIG ( A 8 2 60 20201028233206 20201025223206 40089 uscurrency.gov. nBHThDWlX4cQm+JRFP3X3ABr3Brv6HPfXJflP79C5FWG6WOP+UV6vy19bCOhiokEw8OC3NMwHvyQ mByNX85NJC7FppOXrFb1XVYJACvKcBseuZK5QgOsUcjOkFhPgXSHk7VpLgN1bLly2Mb545OZ+IKt 3OYOQG82PzahHWnA5Qk= )`
	RRSIG=40089 and DNSKEY=40089 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test USCURRENCY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: