DNSSEC Debugger - YOUTHRULES.GOV

Domain Name:

Time: 2026-02-23 05:49:05 UTC

Analyzing DNSSEC problems for YOUTHRULES.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 37423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to e.root-servers.net for YOUTHRULES.GOV/A
	Received 621 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 621 octets ;; HEADER SECTION ;; id = 62094 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260307170000 20260222160000 21831 . iNEVt90L3tqr3i4eQ07otLuJfszsqVrU+kUXbSWkPKG7P1+bo5iLGOR8nb8uHDWqO2Lwnk7OUxOd gLs7tEmLWJ/pt2ozKYp16W+jXrOVEhrrJOIcFPAvp+VIOLoQzBCX0odXeR+aTytovQWPx7OCNPxr Pxe1K+Yp71QqvPGgXJJDJ6X53yOFjpuJiRlLMe4BubrjdbaE+j5gpAONjjtD/8VWrfknPr8NYM4B g13SERdkc7OlfzkD75pVV98e1JtlNEJXI9ucCoEv6wlnpgX8lkaGIJmNz+Gz9RUlVF6fKLw0fNNt sLB6SXiw8EFQX/PgbPnWsG48aRx8tOY01qDKIA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 610 octets ;; HEADER SECTION ;; id = 42778 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 370 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 370 octets ;; HEADER SECTION ;; id = 61667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 21583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.GOV for YOUTHRULES.GOV/A
	Received 321 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 321 octets ;; HEADER SECTION ;; id = 41916 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) YOUTHRULES.GOV. 10800 IN NS a1-165.akam.net. YOUTHRULES.GOV. 10800 IN NS a10-66.akam.net. YOUTHRULES.GOV. 10800 IN NS a24-67.akam.net. YOUTHRULES.GOV. 10800 IN NS a5-64.akam.net. YOUTHRULES.GOV. 10800 IN NS a6-65.akam.net. YOUTHRULES.GOV. 10800 IN NS a7-66.akam.net. YOUTHRULES.GOV. 3600 IN DS ( 13855 8 2 46eeb2e30cfbf4ebd2fa672f3041a2492b5681380672bf05b802cf2706edfdfd ) YOUTHRULES.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224064905 20260222044905 35496 gov. mettRsreoU6Zg3a4AC2EdamESCPaE2GkCGEeIvAYGrMSBARYMx3zemHe6Vl3Y+orlDBllVY8JGed ys0XDrwGqg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.GOV for YOUTHRULES.GOV/DNSKEY
	Received 321 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 321 octets ;; HEADER SECTION ;; id = 35624 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) YOUTHRULES.GOV. 10800 IN NS a1-165.akam.net. YOUTHRULES.GOV. 10800 IN NS a10-66.akam.net. YOUTHRULES.GOV. 10800 IN NS a24-67.akam.net. YOUTHRULES.GOV. 10800 IN NS a5-64.akam.net. YOUTHRULES.GOV. 10800 IN NS a6-65.akam.net. YOUTHRULES.GOV. 10800 IN NS a7-66.akam.net. YOUTHRULES.GOV. 3600 IN DS ( 13855 8 2 46eeb2e30cfbf4ebd2fa672f3041a2492b5681380672bf05b802cf2706edfdfd ) YOUTHRULES.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224064905 20260222044905 35496 gov. XWwbLbDHQnOW+9ZKE0Vs35D+rCDdr7UjeRPFOkopOJ4hE02qIkSQMN/iFYleCa8bmqo1oJ7I53zv 6O6CArNiKQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone YOUTHRULES.GOV

YOUTHRULES.GOV

	Checking DS between GOV and YOUTHRULES.GOV
	Query to d.ns.GOV for YOUTHRULES.GOV/DS
	Received 190 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 190 octets ;; HEADER SECTION ;; id = 15877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN DS ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 3600 IN DS ( 13855 8 2 46eeb2e30cfbf4ebd2fa672f3041a2492b5681380672bf05b802cf2706edfdfd ) YOUTHRULES.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224064905 20260222044905 35496 gov. lOCqr+qLXxorOwz2iSFweiXudRdVM2L045B49f2w7ajSclT5WS7oQA/neUzIowRNOJqAa1UYQoBe aXYjeiqVkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for YOUTHRULES.GOV in the GOV zone
	DS=13855/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`YOUTHRULES.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224064905 20260222044905 35496 gov. lOCqr+qLXxorOwz2iSFweiXudRdVM2L045B49f2w7ajSclT5WS7oQA/neUzIowRNOJqAa1UYQoBe aXYjeiqVkA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=13855/SHA-256 is now in the chain-of-trust
	`YOUTHRULES.GOV. 3600 IN DS ( 13855 8 2 46eeb2e30cfbf4ebd2fa672f3041a2492b5681380672bf05b802cf2706edfdfd )`
	Query to a6-65.akam.net for YOUTHRULES.GOV/DNSKEY
	Received 917 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 917 octets ;; HEADER SECTION ;; id = 65134 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) YOUTHRULES.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAdQ7UxHMmBXk9+pxN8C5yDugNP9lGBM7lk9JPLXyBHqtPeSiqPyXd7Li+hmHKwz8e9gFy8Ql vuRuTSfKVFA9YdA9xtmdUcZCPDLqNp1ARY2X9KcKoxUCCw6/0xBCLXbIk0FrUbfg3OUfa/fH1+lP 4t/mjo2gJREeRLDlcj/PczkzV7zZ9C/Sc0EkvzbhXzD0EwdcjRUsuKbXSSIdVTRQ+Fu3HijXAyYk i6sd/MbaGh4zaaEfW4ezf4KKvf6vuFp9MphRLJL48bdP5su2IkS3XzcC1B8MFdaZRXCvu17wZ66K joNLRwU2XXXDTtqW6yP/4m2MBH+L6ysYDDi4GtJCBUk= ) ; keytag 13855 YOUTHRULES.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAdmQ8qZ9EA/dYItmKNiOP6YzCMm0ffGgjDBxknD0L6SfsvJzALDZvc2IPNzRJ5WMfdVcIGS7 bshPXzbwV+eCgNPxBsDBzgStU9j8/azMGwbw46WS3e/WNh47Mm3hRHReOuWguYft8cjikAWm+a6h WR/ZD68TY5nHYsIDajCl6xdN ) ; keytag 34176 YOUTHRULES.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAbYwpWMxY/0n2O76j21GDXX6WoSYrSSAJHIu3iTH95p3HCzH1wsikBznykQL6Kw0fMrC2/AX OsOlNoNkO3kdKKsxi+9V3Lu0Qmn/Uk777BgE3Ed4m+oaLdlLZUp3FiksVt42HAi1AQCxpm+wnbkp 40LQLU/U4ozev9tQjR8WvkmH ) ; keytag 55681 YOUTHRULES.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260225231134 20260222221134 13855 youthrules.gov. wDTQide8g1VmXdIn/baRsM645SGVGT5dTjWEBSSgjB9yK9GLDJbydIgkPdZSKcN5GhNQcP9E6xS7 CLBK5/B4oIPUHhnDDpkzQXdwqVyb8EoBLFhI28woNT9T4NNvOQX09u0NSGIIy1nq9MXm25Sxqry9 JlPfBqbWY+x/P0K0Ou321D4m5IZ1HgvO/YHaymTXwnI/RU63gF/qGMqLim/cewS5D61PgqtaluSl PqSyhUR58JUn7sPHJ0rLKmxrZbAFRPJ/cNktgntf3P+Lpj7b/H6t/N0yswiApkvN+7B47086U/25 UP7uS9FwHJw8XlvEwUDGarR8ovKG5bqflcUkEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for YOUTHRULES.GOV
	`YOUTHRULES.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAdQ7UxHMmBXk9+pxN8C5yDugNP9lGBM7lk9JPLXyBHqtPeSiqPyXd7Li+hmHKwz8e9gFy8Ql vuRuTSfKVFA9YdA9xtmdUcZCPDLqNp1ARY2X9KcKoxUCCw6/0xBCLXbIk0FrUbfg3OUfa/fH1+lP 4t/mjo2gJREeRLDlcj/PczkzV7zZ9C/Sc0EkvzbhXzD0EwdcjRUsuKbXSSIdVTRQ+Fu3HijXAyYk i6sd/MbaGh4zaaEfW4ezf4KKvf6vuFp9MphRLJL48bdP5su2IkS3XzcC1B8MFdaZRXCvu17wZ66K joNLRwU2XXXDTtqW6yP/4m2MBH+L6ysYDDi4GtJCBUk= ) ; keytag 13855`
	`YOUTHRULES.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAdmQ8qZ9EA/dYItmKNiOP6YzCMm0ffGgjDBxknD0L6SfsvJzALDZvc2IPNzRJ5WMfdVcIGS7 bshPXzbwV+eCgNPxBsDBzgStU9j8/azMGwbw46WS3e/WNh47Mm3hRHReOuWguYft8cjikAWm+a6h WR/ZD68TY5nHYsIDajCl6xdN ) ; keytag 34176`
	`YOUTHRULES.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAbYwpWMxY/0n2O76j21GDXX6WoSYrSSAJHIu3iTH95p3HCzH1wsikBznykQL6Kw0fMrC2/AX OsOlNoNkO3kdKKsxi+9V3Lu0Qmn/Uk777BgE3Ed4m+oaLdlLZUp3FiksVt42HAi1AQCxpm+wnbkp 40LQLU/U4ozev9tQjR8WvkmH ) ; keytag 55681`
	DNSKEY=13855/SEP is now in the chain-of-trust
	DS=13855/SHA-256 verifies DNSKEY=13855/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`YOUTHRULES.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260225231134 20260222221134 13855 youthrules.gov. wDTQide8g1VmXdIn/baRsM645SGVGT5dTjWEBSSgjB9yK9GLDJbydIgkPdZSKcN5GhNQcP9E6xS7 CLBK5/B4oIPUHhnDDpkzQXdwqVyb8EoBLFhI28woNT9T4NNvOQX09u0NSGIIy1nq9MXm25Sxqry9 JlPfBqbWY+x/P0K0Ou321D4m5IZ1HgvO/YHaymTXwnI/RU63gF/qGMqLim/cewS5D61PgqtaluSl PqSyhUR58JUn7sPHJ0rLKmxrZbAFRPJ/cNktgntf3P+Lpj7b/H6t/N0yswiApkvN+7B47086U/25 UP7uS9FwHJw8XlvEwUDGarR8ovKG5bqflcUkEg== )`
	RRSIG=13855 and DNSKEY=13855/SEP verifies the DNSKEY RRset
	DNSKEY=34176 is now in the chain-of-trust
	DNSKEY=55681 is now in the chain-of-trust
	Query to a1-165.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 193.108.91.165
	;; Response received from [193.108.91.165] 233 octets ;; HEADER SECTION ;; id = 48384 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.49.187.196 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. Hb2jcj0HgZhEQ4Pn4+G0dstoyN3gjR3Xf77FKXqiCgb7+6H2b/tc65gdPoMnmrjEQrsynuq4JODm HGz0ainTkg1UDJjc0CemaWkIZx0xUc4/stoCX4UMdGokYO9pfJRhjG13fvKxPZ4qHCN1sI+lqQFr KfT2CAsUvm0RCMSkEkU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-165.akam.net is authoritative for YOUTHRULES.GOV
	Found RRSIG signed by youthrules.gov zone
	Query to a6-65.akam.net for YOUTHRULES.GOV/SOA
	Received 582 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 582 octets ;; HEADER SECTION ;; id = 51158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN SOA ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 86400 IN SOA ( internal.akam.net. hostmaster.dol.GOV. 2018040721 ;serial 43200 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) YOUTHRULES.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. fe+Ck+qFTOyA9ihYGvl1wfCFR/yS4TmvkcGWjVsjCx/3c+Psmdsc30quBDx9mOENrw+tLtFHqCmc uHv0oEuGNlcB4GUnARuSkEs5UwZ77ib76u7JfXHJtif1YKDtoI3S9MKs+E8guP5NQXEhxsW9sfy8 A1FD55UDCy5mAUJfQJg= ) ;; AUTHORITY SECTION (7 records) YOUTHRULES.GOV. 86400 IN NS a1-165.akam.net. YOUTHRULES.GOV. 86400 IN NS a5-64.akam.net. YOUTHRULES.GOV. 86400 IN NS a6-65.akam.net. YOUTHRULES.GOV. 86400 IN NS a7-66.akam.net. YOUTHRULES.GOV. 86400 IN NS a24-67.akam.net. YOUTHRULES.GOV. 86400 IN NS a10-66.akam.net. YOUTHRULES.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. iz7Gr2pY1V5E6n2+HNWoiafUqYM2fJs2+r5V1hWYGDlQb1QHvCFKX3u0xCBda4Jg/CbOgkxzHeVA kz2gWqBSmFw/WsWbLTIwIR7sbKEn3MT5itOrgdYCmkrQp5hiQfAitNhKb/L57NToV3l873Acx7pV rFwPZhysk413sYMU+Pg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a7-66.akam.net for YOUTHRULES.GOV/SOA
	Received 582 bytes from 23.61.199.66
	;; Response received from [23.61.199.66] 582 octets ;; HEADER SECTION ;; id = 27735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN SOA ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 86400 IN SOA ( internal.akam.net. hostmaster.dol.GOV. 2018040721 ;serial 43200 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) YOUTHRULES.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. fe+Ck+qFTOyA9ihYGvl1wfCFR/yS4TmvkcGWjVsjCx/3c+Psmdsc30quBDx9mOENrw+tLtFHqCmc uHv0oEuGNlcB4GUnARuSkEs5UwZ77ib76u7JfXHJtif1YKDtoI3S9MKs+E8guP5NQXEhxsW9sfy8 A1FD55UDCy5mAUJfQJg= ) ;; AUTHORITY SECTION (7 records) YOUTHRULES.GOV. 86400 IN NS a10-66.akam.net. YOUTHRULES.GOV. 86400 IN NS a24-67.akam.net. YOUTHRULES.GOV. 86400 IN NS a1-165.akam.net. YOUTHRULES.GOV. 86400 IN NS a5-64.akam.net. YOUTHRULES.GOV. 86400 IN NS a7-66.akam.net. YOUTHRULES.GOV. 86400 IN NS a6-65.akam.net. YOUTHRULES.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. iz7Gr2pY1V5E6n2+HNWoiafUqYM2fJs2+r5V1hWYGDlQb1QHvCFKX3u0xCBda4Jg/CbOgkxzHeVA kz2gWqBSmFw/WsWbLTIwIR7sbKEn3MT5itOrgdYCmkrQp5hiQfAitNhKb/L57NToV3l873Acx7pV rFwPZhysk413sYMU+Pg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-66.akam.net for YOUTHRULES.GOV/SOA
	Received 582 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 582 octets ;; HEADER SECTION ;; id = 11629 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN SOA ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 86400 IN SOA ( internal.akam.net. hostmaster.dol.GOV. 2018040721 ;serial 43200 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) YOUTHRULES.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. fe+Ck+qFTOyA9ihYGvl1wfCFR/yS4TmvkcGWjVsjCx/3c+Psmdsc30quBDx9mOENrw+tLtFHqCmc uHv0oEuGNlcB4GUnARuSkEs5UwZ77ib76u7JfXHJtif1YKDtoI3S9MKs+E8guP5NQXEhxsW9sfy8 A1FD55UDCy5mAUJfQJg= ) ;; AUTHORITY SECTION (7 records) YOUTHRULES.GOV. 86400 IN NS a6-65.akam.net. YOUTHRULES.GOV. 86400 IN NS a24-67.akam.net. YOUTHRULES.GOV. 86400 IN NS a10-66.akam.net. YOUTHRULES.GOV. 86400 IN NS a5-64.akam.net. YOUTHRULES.GOV. 86400 IN NS a7-66.akam.net. YOUTHRULES.GOV. 86400 IN NS a1-165.akam.net. YOUTHRULES.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. iz7Gr2pY1V5E6n2+HNWoiafUqYM2fJs2+r5V1hWYGDlQb1QHvCFKX3u0xCBda4Jg/CbOgkxzHeVA kz2gWqBSmFw/WsWbLTIwIR7sbKEn3MT5itOrgdYCmkrQp5hiQfAitNhKb/L57NToV3l873Acx7pV rFwPZhysk413sYMU+Pg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a24-67.akam.net for YOUTHRULES.GOV/SOA
	Received 582 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 582 octets ;; HEADER SECTION ;; id = 24988 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN SOA ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 86400 IN SOA ( internal.akam.net. hostmaster.dol.GOV. 2018040721 ;serial 43200 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) YOUTHRULES.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. fe+Ck+qFTOyA9ihYGvl1wfCFR/yS4TmvkcGWjVsjCx/3c+Psmdsc30quBDx9mOENrw+tLtFHqCmc uHv0oEuGNlcB4GUnARuSkEs5UwZ77ib76u7JfXHJtif1YKDtoI3S9MKs+E8guP5NQXEhxsW9sfy8 A1FD55UDCy5mAUJfQJg= ) ;; AUTHORITY SECTION (7 records) YOUTHRULES.GOV. 86400 IN NS a1-165.akam.net. YOUTHRULES.GOV. 86400 IN NS a5-64.akam.net. YOUTHRULES.GOV. 86400 IN NS a24-67.akam.net. YOUTHRULES.GOV. 86400 IN NS a7-66.akam.net. YOUTHRULES.GOV. 86400 IN NS a6-65.akam.net. YOUTHRULES.GOV. 86400 IN NS a10-66.akam.net. YOUTHRULES.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. iz7Gr2pY1V5E6n2+HNWoiafUqYM2fJs2+r5V1hWYGDlQb1QHvCFKX3u0xCBda4Jg/CbOgkxzHeVA kz2gWqBSmFw/WsWbLTIwIR7sbKEn3MT5itOrgdYCmkrQp5hiQfAitNhKb/L57NToV3l873Acx7pV rFwPZhysk413sYMU+Pg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-64.akam.net for YOUTHRULES.GOV/SOA
	Received 582 bytes from 95.100.168.64
	;; Response received from [95.100.168.64] 582 octets ;; HEADER SECTION ;; id = 53845 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN SOA ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 86400 IN SOA ( internal.akam.net. hostmaster.dol.GOV. 2018040721 ;serial 43200 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) YOUTHRULES.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. fe+Ck+qFTOyA9ihYGvl1wfCFR/yS4TmvkcGWjVsjCx/3c+Psmdsc30quBDx9mOENrw+tLtFHqCmc uHv0oEuGNlcB4GUnARuSkEs5UwZ77ib76u7JfXHJtif1YKDtoI3S9MKs+E8guP5NQXEhxsW9sfy8 A1FD55UDCy5mAUJfQJg= ) ;; AUTHORITY SECTION (7 records) YOUTHRULES.GOV. 86400 IN NS a7-66.akam.net. YOUTHRULES.GOV. 86400 IN NS a5-64.akam.net. YOUTHRULES.GOV. 86400 IN NS a6-65.akam.net. YOUTHRULES.GOV. 86400 IN NS a24-67.akam.net. YOUTHRULES.GOV. 86400 IN NS a1-165.akam.net. YOUTHRULES.GOV. 86400 IN NS a10-66.akam.net. YOUTHRULES.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260225231134 20260222221134 55681 youthrules.gov. iz7Gr2pY1V5E6n2+HNWoiafUqYM2fJs2+r5V1hWYGDlQb1QHvCFKX3u0xCBda4Jg/CbOgkxzHeVA kz2gWqBSmFw/WsWbLTIwIR7sbKEn3MT5itOrgdYCmkrQp5hiQfAitNhKb/L57NToV3l873Acx7pV rFwPZhysk413sYMU+Pg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-165.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 193.108.91.165
	;; Response received from [193.108.91.165] 233 octets ;; HEADER SECTION ;; id = 10878 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 184.30.165.72 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. DYI6xev27imkizZMxR+NH36OZ7UhHVJHSq0Bsr00r3ZgrQDMj3hycJ4qKKpB2LqEfX11+9g6F8eg REjWvI1yKlSEI14UHROFVMtnVm7gNHzO4JPFuTH1R9w/UUtsrszYhSKm7+QE/YA0P9hB96UqbNeP YHdOMc/dw3DvvtWji/g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOUTHRULES.GOV A RR has value 184.30.165.72
	Found 1 RRSIGs over A RRset
	`YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. DYI6xev27imkizZMxR+NH36OZ7UhHVJHSq0Bsr00r3ZgrQDMj3hycJ4qKKpB2LqEfX11+9g6F8eg REjWvI1yKlSEI14UHROFVMtnVm7gNHzO4JPFuTH1R9w/UUtsrszYhSKm7+QE/YA0P9hB96UqbNeP YHdOMc/dw3DvvtWji/g= )`
	RRSIG=55681 and DNSKEY=55681 verifies the A RRset

YOUTHRULES.GOV

	Query to a10-66.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 233 octets ;; HEADER SECTION ;; id = 3725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.194.5.35 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. rq59VfBsQvvUgObFQD1e9qdfDIzpcyUsK/QlKk2ICqK7M2y4WmuQaHJh6t9FkuGlzL2JN/yhphGA Ysv+4h7AZ1USxV9zjQfDyTUaIwT7qsUH2F28zNkAaspwG1xiJi+TMKN6t/pndNOQbLNw9kCzfdmp +iPrPpRuCQIGcVnFlDQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a10-66.akam.net is authoritative for YOUTHRULES.GOV
	Found RRSIG signed by youthrules.gov zone
	Query to a10-66.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 233 octets ;; HEADER SECTION ;; id = 36053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.194.5.35 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. rq59VfBsQvvUgObFQD1e9qdfDIzpcyUsK/QlKk2ICqK7M2y4WmuQaHJh6t9FkuGlzL2JN/yhphGA Ysv+4h7AZ1USxV9zjQfDyTUaIwT7qsUH2F28zNkAaspwG1xiJi+TMKN6t/pndNOQbLNw9kCzfdmp +iPrPpRuCQIGcVnFlDQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOUTHRULES.GOV A RR has value 23.194.5.35
	Found 1 RRSIGs over A RRset
	`YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. rq59VfBsQvvUgObFQD1e9qdfDIzpcyUsK/QlKk2ICqK7M2y4WmuQaHJh6t9FkuGlzL2JN/yhphGA Ysv+4h7AZ1USxV9zjQfDyTUaIwT7qsUH2F28zNkAaspwG1xiJi+TMKN6t/pndNOQbLNw9kCzfdmp +iPrPpRuCQIGcVnFlDQ= )`
	RRSIG=55681 and DNSKEY=55681 verifies the A RRset

YOUTHRULES.GOV

	Query to a24-67.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 233 octets ;; HEADER SECTION ;; id = 18802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.52.149.202 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. XezC2W1Y6XkaKa/+RAH9Angm/oJ4u/wAVWoVSpEf/h8+A0/B1LI+GYBuVLIrBE5hnZKqbJfNLntV k44zZjGB3f213ZUh2Uf6NqVlMZEKB+8SWn9+rTb5NQTUSlxoOkWChlR05mKgGNI0PtyE6rV/ACi5 mj7tj1NfMxo4AFbfJxE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a24-67.akam.net is authoritative for YOUTHRULES.GOV
	Found RRSIG signed by youthrules.gov zone
	Query to a24-67.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 233 octets ;; HEADER SECTION ;; id = 5368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.52.149.202 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. XezC2W1Y6XkaKa/+RAH9Angm/oJ4u/wAVWoVSpEf/h8+A0/B1LI+GYBuVLIrBE5hnZKqbJfNLntV k44zZjGB3f213ZUh2Uf6NqVlMZEKB+8SWn9+rTb5NQTUSlxoOkWChlR05mKgGNI0PtyE6rV/ACi5 mj7tj1NfMxo4AFbfJxE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOUTHRULES.GOV A RR has value 23.52.149.202
	Found 1 RRSIGs over A RRset
	`YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. XezC2W1Y6XkaKa/+RAH9Angm/oJ4u/wAVWoVSpEf/h8+A0/B1LI+GYBuVLIrBE5hnZKqbJfNLntV k44zZjGB3f213ZUh2Uf6NqVlMZEKB+8SWn9+rTb5NQTUSlxoOkWChlR05mKgGNI0PtyE6rV/ACi5 mj7tj1NfMxo4AFbfJxE= )`
	RRSIG=55681 and DNSKEY=55681 verifies the A RRset

YOUTHRULES.GOV

	Query to a7-66.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 23.61.199.66
	;; Response received from [23.61.199.66] 233 octets ;; HEADER SECTION ;; id = 29888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.49.187.196 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. Hb2jcj0HgZhEQ4Pn4+G0dstoyN3gjR3Xf77FKXqiCgb7+6H2b/tc65gdPoMnmrjEQrsynuq4JODm HGz0ainTkg1UDJjc0CemaWkIZx0xUc4/stoCX4UMdGokYO9pfJRhjG13fvKxPZ4qHCN1sI+lqQFr KfT2CAsUvm0RCMSkEkU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a7-66.akam.net is authoritative for YOUTHRULES.GOV
	Found RRSIG signed by youthrules.gov zone
	Query to a7-66.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 23.61.199.66
	;; Response received from [23.61.199.66] 233 octets ;; HEADER SECTION ;; id = 63914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.49.187.196 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. Hb2jcj0HgZhEQ4Pn4+G0dstoyN3gjR3Xf77FKXqiCgb7+6H2b/tc65gdPoMnmrjEQrsynuq4JODm HGz0ainTkg1UDJjc0CemaWkIZx0xUc4/stoCX4UMdGokYO9pfJRhjG13fvKxPZ4qHCN1sI+lqQFr KfT2CAsUvm0RCMSkEkU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOUTHRULES.GOV A RR has value 23.49.187.196
	Found 1 RRSIGs over A RRset
	`YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. Hb2jcj0HgZhEQ4Pn4+G0dstoyN3gjR3Xf77FKXqiCgb7+6H2b/tc65gdPoMnmrjEQrsynuq4JODm HGz0ainTkg1UDJjc0CemaWkIZx0xUc4/stoCX4UMdGokYO9pfJRhjG13fvKxPZ4qHCN1sI+lqQFr KfT2CAsUvm0RCMSkEkU= )`
	RRSIG=55681 and DNSKEY=55681 verifies the A RRset

YOUTHRULES.GOV

	Query to a6-65.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 233 octets ;; HEADER SECTION ;; id = 31256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.49.187.196 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. Hb2jcj0HgZhEQ4Pn4+G0dstoyN3gjR3Xf77FKXqiCgb7+6H2b/tc65gdPoMnmrjEQrsynuq4JODm HGz0ainTkg1UDJjc0CemaWkIZx0xUc4/stoCX4UMdGokYO9pfJRhjG13fvKxPZ4qHCN1sI+lqQFr KfT2CAsUvm0RCMSkEkU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a6-65.akam.net is authoritative for YOUTHRULES.GOV
	Found RRSIG signed by youthrules.gov zone
	Query to a6-65.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 233 octets ;; HEADER SECTION ;; id = 25422 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.49.187.196 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. Hb2jcj0HgZhEQ4Pn4+G0dstoyN3gjR3Xf77FKXqiCgb7+6H2b/tc65gdPoMnmrjEQrsynuq4JODm HGz0ainTkg1UDJjc0CemaWkIZx0xUc4/stoCX4UMdGokYO9pfJRhjG13fvKxPZ4qHCN1sI+lqQFr KfT2CAsUvm0RCMSkEkU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOUTHRULES.GOV A RR has value 23.49.187.196
	Found 1 RRSIGs over A RRset
	`YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. Hb2jcj0HgZhEQ4Pn4+G0dstoyN3gjR3Xf77FKXqiCgb7+6H2b/tc65gdPoMnmrjEQrsynuq4JODm HGz0ainTkg1UDJjc0CemaWkIZx0xUc4/stoCX4UMdGokYO9pfJRhjG13fvKxPZ4qHCN1sI+lqQFr KfT2CAsUvm0RCMSkEkU= )`
	RRSIG=55681 and DNSKEY=55681 verifies the A RRset

YOUTHRULES.GOV

	Query to a5-64.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 95.100.168.64
	;; Response received from [95.100.168.64] 233 octets ;; HEADER SECTION ;; id = 50734 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.204.212.218 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. dq8097cXlbbH/DhJAmGZ4d6vVs0Kd6oIyJ3XNXmSnTiGUQ8p0okAj7irZPCQ8W0L8lmFjQgug20n 9VutGinFs2dUaGw9jFTNVcyDG7S29Xj7UOvQyPAWjX0NBfJlur83qaHhD5Z9/u8RaKLsTqJRYyUT dIce8qN2eo1fthoCmzQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-64.akam.net is authoritative for YOUTHRULES.GOV
	Found RRSIG signed by youthrules.gov zone
	Query to a5-64.akam.net for YOUTHRULES.GOV/A
	Received 233 bytes from 95.100.168.64
	;; Response received from [95.100.168.64] 233 octets ;; HEADER SECTION ;; id = 35235 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; YOUTHRULES.GOV. IN A ;; ANSWER SECTION (2 records) YOUTHRULES.GOV. 20 IN A 23.204.212.218 YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. dq8097cXlbbH/DhJAmGZ4d6vVs0Kd6oIyJ3XNXmSnTiGUQ8p0okAj7irZPCQ8W0L8lmFjQgug20n 9VutGinFs2dUaGw9jFTNVcyDG7S29Xj7UOvQyPAWjX0NBfJlur83qaHhD5Z9/u8RaKLsTqJRYyUT dIce8qN2eo1fthoCmzQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	YOUTHRULES.GOV A RR has value 23.204.212.218
	Found 1 RRSIGs over A RRset
	`YOUTHRULES.GOV. 20 IN RRSIG ( A 8 2 20 20260225231134 20260222221134 55681 youthrules.gov. dq8097cXlbbH/DhJAmGZ4d6vVs0Kd6oIyJ3XNXmSnTiGUQ8p0okAj7irZPCQ8W0L8lmFjQgug20n 9VutGinFs2dUaGw9jFTNVcyDG7S29Xj7UOvQyPAWjX0NBfJlur83qaHhD5Z9/u8RaKLsTqJRYyUT dIce8qN2eo1fthoCmzQ= )`
	RRSIG=55681 and DNSKEY=55681 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test YOUTHRULES.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: