DNSSEC Debugger

Domain Name:

Time: 2025-10-13 14:59:57 UTC

Analyzing DNSSEC problems for anl.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1141 octets ;; HEADER SECTION ;; id = 51919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to i.root-servers.net for anl.gov/A
	Received 617 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 617 octets ;; HEADER SECTION ;; id = 36303 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251026050000 20251013040000 61809 . RmLOBsnAACjMEEdUNqp5zPhhgWdSQKOQZRM1pHiUtirU+TkxPsFie+e/DoBPPTfs1jFWGXgPCrh5 NFbtDLPr5SAlddFhueSHhjkSYu3BvBpTCQ0ET+ROiN3UqaHHD1fL4ukbVj+jbWVqMfSMYl7okLlp V4+hN5DjtCV61QAl4UqSuamXplWJufwid5l804q2554Bg3vdhkAuCG+foyFHKwCEHu7nieoOgRDL W0a931W6nOpDfEaX1PyazEXsPx6EP6ETQLV3R3ezZ2/7b5Y+uvYwD+tWNGZKedidWXWLR5qcYnFw oGI5a4xOrice3EKSdC9FmiGaE+8uuZefmIgo7g== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 6850 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251026050000 20251013040000 61809 . RmLOBsnAACjMEEdUNqp5zPhhgWdSQKOQZRM1pHiUtirU+TkxPsFie+e/DoBPPTfs1jFWGXgPCrh5 NFbtDLPr5SAlddFhueSHhjkSYu3BvBpTCQ0ET+ROiN3UqaHHD1fL4ukbVj+jbWVqMfSMYl7okLlp V4+hN5DjtCV61QAl4UqSuamXplWJufwid5l804q2554Bg3vdhkAuCG+foyFHKwCEHu7nieoOgRDL W0a931W6nOpDfEaX1PyazEXsPx6EP6ETQLV3R3ezZ2/7b5Y+uvYwD+tWNGZKedidWXWLR5qcYnFw oGI5a4xOrice3EKSdC9FmiGaE+8uuZefmIgo7g== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to i.root-servers.net for gov/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 15664 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251026050000 20251013040000 61809 . RmLOBsnAACjMEEdUNqp5zPhhgWdSQKOQZRM1pHiUtirU+TkxPsFie+e/DoBPPTfs1jFWGXgPCrh5 NFbtDLPr5SAlddFhueSHhjkSYu3BvBpTCQ0ET+ROiN3UqaHHD1fL4ukbVj+jbWVqMfSMYl7okLlp V4+hN5DjtCV61QAl4UqSuamXplWJufwid5l804q2554Bg3vdhkAuCG+foyFHKwCEHu7nieoOgRDL W0a931W6nOpDfEaX1PyazEXsPx6EP6ETQLV3R3ezZ2/7b5Y+uvYwD+tWNGZKedidWXWLR5qcYnFw oGI5a4xOrice3EKSdC9FmiGaE+8uuZefmIgo7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20251026050000 20251013040000 61809 . RmLOBsnAACjMEEdUNqp5zPhhgWdSQKOQZRM1pHiUtirU+TkxPsFie+e/DoBPPTfs1jFWGXgPCrh5 NFbtDLPr5SAlddFhueSHhjkSYu3BvBpTCQ0ET+ROiN3UqaHHD1fL4ukbVj+jbWVqMfSMYl7okLlp V4+hN5DjtCV61QAl4UqSuamXplWJufwid5l804q2554Bg3vdhkAuCG+foyFHKwCEHu7nieoOgRDL W0a931W6nOpDfEaX1PyazEXsPx6EP6ETQLV3R3ezZ2/7b5Y+uvYwD+tWNGZKedidWXWLR5qcYnFw oGI5a4xOrice3EKSdC9FmiGaE+8uuZefmIgo7g== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 45834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for anl.gov/A
	Received 383 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 383 octets ;; HEADER SECTION ;; id = 10296 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) anl.gov. 10800 IN NS adns1.es.net. anl.gov. 10800 IN NS adns2.es.net. anl.gov. 10800 IN NS sdns.lbnl.net. anl.gov. 10800 IN NS t1dns1.anl.gov. anl.gov. 10800 IN NS t1dns2.anl.gov. anl.gov. 3600 IN DS ( 12046 8 2 1c459649d2dfaf06f020981c44e881cb5d34d0d3ef10f7f2aa6201b7d04e1ad9 ) anl.gov. 3600 IN RRSIG ( DS 13 2 3600 20251014155958 20251012135958 35496 gov. 9wprGcZXdU+6eW9ebytdpS701amTTcU669KZbtUVMtnMdP6wxfkSwbpqxg8M3yi/JKOz9+zMSSBE w9Xu6YrwxQ== ) ;; ADDITIONAL SECTION (5 records) t1dns1.anl.gov. 3600 IN A 130.202.101.6 t1dns1.anl.gov. 3600 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 3600 IN A 130.202.101.37 t1dns2.anl.gov. 3600 IN AAAA 2620:0:dc0:180d::37 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for anl.gov/DNSKEY
	Received 383 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 383 octets ;; HEADER SECTION ;; id = 41958 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) anl.gov. 10800 IN NS adns1.es.net. anl.gov. 10800 IN NS adns2.es.net. anl.gov. 10800 IN NS sdns.lbnl.net. anl.gov. 10800 IN NS t1dns1.anl.gov. anl.gov. 10800 IN NS t1dns2.anl.gov. anl.gov. 3600 IN DS ( 12046 8 2 1c459649d2dfaf06f020981c44e881cb5d34d0d3ef10f7f2aa6201b7d04e1ad9 ) anl.gov. 3600 IN RRSIG ( DS 13 2 3600 20251014155958 20251012135958 35496 gov. 8+0NXlcjp+Fyt0JSXI8htnLprn8/+2g5TCjpb7W0q6/85I5gv+SdNi52APEADZ3oAoV2yyTJvjtD nCYV0cHLnA== ) ;; ADDITIONAL SECTION (5 records) t1dns1.anl.gov. 3600 IN A 130.202.101.6 t1dns1.anl.gov. 3600 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 3600 IN A 130.202.101.37 t1dns2.anl.gov. 3600 IN AAAA 2620:0:dc0:180d::37 ;; { "EDNS-VERSION": 0 }
	Found child zone anl.gov

anl.gov

	Checking DS between gov and anl.gov
	Query to b.ns.gov for anl.gov/DS
	Received 183 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 183 octets ;; HEADER SECTION ;; id = 48656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN DS ;; ANSWER SECTION (2 records) anl.gov. 3600 IN DS ( 12046 8 2 1c459649d2dfaf06f020981c44e881cb5d34d0d3ef10f7f2aa6201b7d04e1ad9 ) anl.gov. 3600 IN RRSIG ( DS 13 2 3600 20251014155958 20251012135958 35496 gov. fiPruB2/CQJa8uefokQzIEQmMTmWDlvbeCMB18QlOKPavppTjTnLDQbiPB1Es6QDOm40IdZx7zkx VZsHDS8spg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for anl.gov in the gov zone
	DS=12046/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`anl.gov. 3600 IN RRSIG ( DS 13 2 3600 20251014155958 20251012135958 35496 gov. fiPruB2/CQJa8uefokQzIEQmMTmWDlvbeCMB18QlOKPavppTjTnLDQbiPB1Es6QDOm40IdZx7zkx VZsHDS8spg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=12046/SHA-256 is now in the chain-of-trust
	`anl.gov. 3600 IN DS ( 12046 8 2 1c459649d2dfaf06f020981c44e881cb5d34d0d3ef10f7f2aa6201b7d04e1ad9 )`
	Query to sdns.lbnl.net for anl.gov/DNSKEY
	Received 883 bytes from 131.243.5.53
	;; Response received from [131.243.5.53] 883 octets ;; HEADER SECTION ;; id = 48352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN DNSKEY ;; ANSWER SECTION (3 records) anl.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcM2roG4li6xznqX1CFTWpsgD1f3vrba0OKkCvtqAVd845EbKMDZKfKRcedye6wUP1J0pGUM Z+V1ct9dqEkAltXkSazlIEk7AmUYcNrbVse10m0JxcW8sQmHrE5ZjkmSTC6YJMQL3p0RPSpvIG1b g0RwWxQP02TvTTyWtH2G0DbR3pZkOj6pJEBE3rcY3gId8/53Wbd8DCPmQTdGtNjYP2KPR+Y4Mo9S 3QoP8GAXwq43BfPFY2j3BPzCwQJsdGW7IdfNbh7LvDj3KvXy2y8LtniafyBjGQfTxQGdOe3PKAGC WjWurj03Yv4VJw41JnRVCQSHoR2xLatDao1KwGuK1Zc= ) ; keytag 11793 anl.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAeIcu59RtoGgNJ/XdTj+R2GtyuF413rYON87DioMkTgMoZdtoWf48hq+t/f2OWyofmuvKnaN 2ESZK8p+MtPTBMcEKJp5AnSPzm5fwK+yqbeAqchZZUWQZPStxl8/XQEwNG1aRnznPuW/KD40k2nK ecSxf2/bQ4KYGaN4J46qG/nqT4J/CnqJfbY0o1hXSWEZEkspAzNQM+zxZsk3phyrE7mfu0LfQOAb eNp/spE+yesCi0TqjoAYYYokS7i2sbtCZN+1mIoot2O02dMm7qUU04+mqy/qGkd7DMg06USDnnKu kTXNmEtGOo19dEU6FxccGrqzgP2fBIu7ZMxtzYmpLzM= ) ; keytag 12046 anl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251028152953 20250928144449 12046 anl.gov. xwtDi7Cajd5DdnAvaujRaaRBn2xbHoqlYe01M7EYUa5+a7vkdDhjBltzW8dXoQVl091YgvvcV0fJ qQDxgSdmyK6yHSJaLqapCBdLe3XLPBhg0slkYRKG93XPQsgm/8xWixvjoVSAfSDdRzRK6qDTomxW tRDK3X8AjmzQIIH3G8ospvm88UrTF5n27A4rBf6Idz0eIsEWL/UIl8ak/pCLUlDwc4k4GmYeR2fz h9i5fgkvf0Mlpure04cutcP+USHqKWGaClklMmKpAf6H3rkllHtTHvNWAQ8OE320zLIruVs92Bx7 ys7/T612AlhxlqDFlOGCnN7NohkxfDL0kw6HPw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for anl.gov
	`anl.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcM2roG4li6xznqX1CFTWpsgD1f3vrba0OKkCvtqAVd845EbKMDZKfKRcedye6wUP1J0pGUM Z+V1ct9dqEkAltXkSazlIEk7AmUYcNrbVse10m0JxcW8sQmHrE5ZjkmSTC6YJMQL3p0RPSpvIG1b g0RwWxQP02TvTTyWtH2G0DbR3pZkOj6pJEBE3rcY3gId8/53Wbd8DCPmQTdGtNjYP2KPR+Y4Mo9S 3QoP8GAXwq43BfPFY2j3BPzCwQJsdGW7IdfNbh7LvDj3KvXy2y8LtniafyBjGQfTxQGdOe3PKAGC WjWurj03Yv4VJw41JnRVCQSHoR2xLatDao1KwGuK1Zc= ) ; keytag 11793`
	`anl.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAeIcu59RtoGgNJ/XdTj+R2GtyuF413rYON87DioMkTgMoZdtoWf48hq+t/f2OWyofmuvKnaN 2ESZK8p+MtPTBMcEKJp5AnSPzm5fwK+yqbeAqchZZUWQZPStxl8/XQEwNG1aRnznPuW/KD40k2nK ecSxf2/bQ4KYGaN4J46qG/nqT4J/CnqJfbY0o1hXSWEZEkspAzNQM+zxZsk3phyrE7mfu0LfQOAb eNp/spE+yesCi0TqjoAYYYokS7i2sbtCZN+1mIoot2O02dMm7qUU04+mqy/qGkd7DMg06USDnnKu kTXNmEtGOo19dEU6FxccGrqzgP2fBIu7ZMxtzYmpLzM= ) ; keytag 12046`
	DNSKEY=12046/SEP is now in the chain-of-trust
	DS=12046/SHA-256 verifies DNSKEY=12046/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`anl.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251028152953 20250928144449 12046 anl.gov. xwtDi7Cajd5DdnAvaujRaaRBn2xbHoqlYe01M7EYUa5+a7vkdDhjBltzW8dXoQVl091YgvvcV0fJ qQDxgSdmyK6yHSJaLqapCBdLe3XLPBhg0slkYRKG93XPQsgm/8xWixvjoVSAfSDdRzRK6qDTomxW tRDK3X8AjmzQIIH3G8ospvm88UrTF5n27A4rBf6Idz0eIsEWL/UIl8ak/pCLUlDwc4k4GmYeR2fz h9i5fgkvf0Mlpure04cutcP+USHqKWGaClklMmKpAf6H3rkllHtTHvNWAQ8OE320zLIruVs92Bx7 ys7/T612AlhxlqDFlOGCnN7NohkxfDL0kw6HPw== )`
	RRSIG=12046 and DNSKEY=12046/SEP verifies the DNSKEY RRset
	DNSKEY=11793 is now in the chain-of-trust
	Query to adns2.es.net for anl.gov/A
	Received 741 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 741 octets ;; HEADER SECTION ;; id = 33579 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns2.es.net is authoritative for anl.gov
	Found RRSIG signed by anl.gov zone
	Query to sdns.lbnl.net for anl.gov/SOA
	Received 1182 bytes from 131.243.5.53
	;; Response received from [131.243.5.53] 1182 octets ;; HEADER SECTION ;; id = 17504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN SOA ;; ANSWER SECTION (2 records) anl.gov. 86400 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) ;; AUTHORITY SECTION (6 records) anl.gov. 86400 IN NS sdns.lbnl.net. anl.gov. 86400 IN NS adns1.es.net. anl.gov. 86400 IN NS t1dns2.anl.gov. anl.gov. 86400 IN NS t1dns1.anl.gov. anl.gov. 86400 IN NS adns2.es.net. anl.gov. 86400 IN RRSIG ( NS 8 2 86400 20251101130808 20251002121500 11793 anl.gov. sZ1fKO2FW6068Slt5Vshdwnq2Hp7OToBo3QyS2/ykoyil68tbKtp3HfhreQyMsiJS91ormuA48/R U1UR7QT2/dvW3HABPcnCHVEbr2Vrmm60NtfOW+qXJjpeF2kbQGDbO+SpxIPQBceVBwCzQN5++eah +qdS7nCCqWMCPHsZmUoFBDV+ln/RiHb7p5yh+JoWhQ1xYGBZUoZYxzo9vL3DlflgOxu519MBPyBA uGGHYjB4nB3M8KF6MDaeSCSRpCh0E4cj8moaHYQJEMbLj6G93IGagi+fIPt2EY4kgZX5n7yn2Ak1 Nm+KzTPZBAr6pgs7UspQ+pMjZUAM64X8odkWIQ== ) ;; ADDITIONAL SECTION (6 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20251028152133 20250928151254 11793 anl.gov. GvsUI63+skBB6I/3okLkQuvr1bhNYYEfvEL4ivbrofjSyPY/s4FYbwptvYicQODwklrRH/q+hHy9 sBOXLrpNBr5+oRQ6jAxfo4FkzLd2hsTqRjI8uMp81PwPl3k2Lk7OFPL1q9uDJOkyp0Lm1DLXyUBK WJFln+qLuTym1Vn9I21Q7gqMQVmB15zqidISAvy3dZM6T4GF63si1E+1zAyDvbSAFJmVEPZPhYSB t29kxgF/q4es8RafvMRkMIn4e0mdnffjASIklesvN+79ozNiM5wkI4JoTsqc+w7km5N147yk2GcS sMw7JFesVH/szc1N50aRcIWQz3M/TJASTT0Wkw== ) ;; { "EDNS-VERSION": 0 }
	Query to t1dns1.anl.gov for anl.gov/SOA
	Received 1182 bytes from 130.202.101.6
	;; Response received from [130.202.101.6] 1182 octets ;; HEADER SECTION ;; id = 57379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN SOA ;; ANSWER SECTION (2 records) anl.gov. 86400 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) ;; AUTHORITY SECTION (6 records) anl.gov. 86400 IN NS t1dns2.anl.gov. anl.gov. 86400 IN NS t1dns1.anl.gov. anl.gov. 86400 IN NS adns1.es.net. anl.gov. 86400 IN NS adns2.es.net. anl.gov. 86400 IN NS sdns.lbnl.net. anl.gov. 86400 IN RRSIG ( NS 8 2 86400 20251101130808 20251002121500 11793 anl.gov. sZ1fKO2FW6068Slt5Vshdwnq2Hp7OToBo3QyS2/ykoyil68tbKtp3HfhreQyMsiJS91ormuA48/R U1UR7QT2/dvW3HABPcnCHVEbr2Vrmm60NtfOW+qXJjpeF2kbQGDbO+SpxIPQBceVBwCzQN5++eah +qdS7nCCqWMCPHsZmUoFBDV+ln/RiHb7p5yh+JoWhQ1xYGBZUoZYxzo9vL3DlflgOxu519MBPyBA uGGHYjB4nB3M8KF6MDaeSCSRpCh0E4cj8moaHYQJEMbLj6G93IGagi+fIPt2EY4kgZX5n7yn2Ak1 Nm+KzTPZBAr6pgs7UspQ+pMjZUAM64X8odkWIQ== ) ;; ADDITIONAL SECTION (6 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20251028152133 20250928151254 11793 anl.gov. GvsUI63+skBB6I/3okLkQuvr1bhNYYEfvEL4ivbrofjSyPY/s4FYbwptvYicQODwklrRH/q+hHy9 sBOXLrpNBr5+oRQ6jAxfo4FkzLd2hsTqRjI8uMp81PwPl3k2Lk7OFPL1q9uDJOkyp0Lm1DLXyUBK WJFln+qLuTym1Vn9I21Q7gqMQVmB15zqidISAvy3dZM6T4GF63si1E+1zAyDvbSAFJmVEPZPhYSB t29kxgF/q4es8RafvMRkMIn4e0mdnffjASIklesvN+79ozNiM5wkI4JoTsqc+w7km5N147yk2GcS sMw7JFesVH/szc1N50aRcIWQz3M/TJASTT0Wkw== ) ;; { "EDNS-VERSION": 0 }
	Query to adns1.es.net for anl.gov/SOA
	Received 383 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 383 octets ;; HEADER SECTION ;; id = 50369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN SOA ;; ANSWER SECTION (2 records) anl.gov. 86400 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to t1dns2.anl.gov for anl.gov/SOA
	Received 1182 bytes from 130.202.101.37
	;; Response received from [130.202.101.37] 1182 octets ;; HEADER SECTION ;; id = 35419 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN SOA ;; ANSWER SECTION (2 records) anl.gov. 86400 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) ;; AUTHORITY SECTION (6 records) anl.gov. 86400 IN NS t1dns1.anl.gov. anl.gov. 86400 IN NS adns1.es.net. anl.gov. 86400 IN NS t1dns2.anl.gov. anl.gov. 86400 IN NS sdns.lbnl.net. anl.gov. 86400 IN NS adns2.es.net. anl.gov. 86400 IN RRSIG ( NS 8 2 86400 20251101130808 20251002121500 11793 anl.gov. sZ1fKO2FW6068Slt5Vshdwnq2Hp7OToBo3QyS2/ykoyil68tbKtp3HfhreQyMsiJS91ormuA48/R U1UR7QT2/dvW3HABPcnCHVEbr2Vrmm60NtfOW+qXJjpeF2kbQGDbO+SpxIPQBceVBwCzQN5++eah +qdS7nCCqWMCPHsZmUoFBDV+ln/RiHb7p5yh+JoWhQ1xYGBZUoZYxzo9vL3DlflgOxu519MBPyBA uGGHYjB4nB3M8KF6MDaeSCSRpCh0E4cj8moaHYQJEMbLj6G93IGagi+fIPt2EY4kgZX5n7yn2Ak1 Nm+KzTPZBAr6pgs7UspQ+pMjZUAM64X8odkWIQ== ) ;; ADDITIONAL SECTION (6 records) t1dns1.anl.gov. 86400 IN A 130.202.101.6 t1dns2.anl.gov. 86400 IN A 130.202.101.37 t1dns1.anl.gov. 86400 IN AAAA 2620:0:dc0:180e::6 t1dns2.anl.gov. 86400 IN AAAA 2620:0:dc0:180d::37 t1dns1.anl.gov. 86400 IN RRSIG ( A 8 3 86400 20251028152133 20250928151254 11793 anl.gov. GvsUI63+skBB6I/3okLkQuvr1bhNYYEfvEL4ivbrofjSyPY/s4FYbwptvYicQODwklrRH/q+hHy9 sBOXLrpNBr5+oRQ6jAxfo4FkzLd2hsTqRjI8uMp81PwPl3k2Lk7OFPL1q9uDJOkyp0Lm1DLXyUBK WJFln+qLuTym1Vn9I21Q7gqMQVmB15zqidISAvy3dZM6T4GF63si1E+1zAyDvbSAFJmVEPZPhYSB t29kxgF/q4es8RafvMRkMIn4e0mdnffjASIklesvN+79ozNiM5wkI4JoTsqc+w7km5N147yk2GcS sMw7JFesVH/szc1N50aRcIWQz3M/TJASTT0Wkw== ) ;; { "EDNS-VERSION": 0 }
	Query to adns2.es.net for anl.gov/A
	Received 741 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 741 octets ;; HEADER SECTION ;; id = 60894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== )`
	RRSIG=11793 and DNSKEY=11793 verifies the NSEC RRset
	NSEC proves no records of type A exist for anl.gov
	Found 1 RRSIGs over SOA RRset
	`anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== )`
	RRSIG=11793 and DNSKEY=11793 verifies the SOA RRset

anl.gov

	Query to adns1.es.net for anl.gov/A
	Received 741 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 741 octets ;; HEADER SECTION ;; id = 12560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns1.es.net is authoritative for anl.gov
	Found RRSIG signed by anl.gov zone
	Query to adns1.es.net for anl.gov/A
	Received 741 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 741 octets ;; HEADER SECTION ;; id = 50388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== )`
	RRSIG=11793 and DNSKEY=11793 verifies the NSEC RRset
	NSEC proves no records of type A exist for anl.gov
	Found 1 RRSIGs over SOA RRset
	`anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== )`
	RRSIG=11793 and DNSKEY=11793 verifies the SOA RRset

anl.gov

	Query to t1dns1.anl.gov for anl.gov/A
	Received 741 bytes from 130.202.101.6
	;; Response received from [130.202.101.6] 741 octets ;; HEADER SECTION ;; id = 2522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	t1dns1.anl.gov is authoritative for anl.gov
	Found RRSIG signed by anl.gov zone
	Query to t1dns1.anl.gov for anl.gov/A
	Received 741 bytes from 130.202.101.6
	;; Response received from [130.202.101.6] 741 octets ;; HEADER SECTION ;; id = 40069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== )`
	RRSIG=11793 and DNSKEY=11793 verifies the NSEC RRset
	NSEC proves no records of type A exist for anl.gov
	Found 1 RRSIGs over SOA RRset
	`anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== )`
	RRSIG=11793 and DNSKEY=11793 verifies the SOA RRset

anl.gov

	Query to sdns.lbnl.net for anl.gov/A
	Received 741 bytes from 131.243.5.53
	;; Response received from [131.243.5.53] 741 octets ;; HEADER SECTION ;; id = 7059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sdns.lbnl.net is authoritative for anl.gov
	Found RRSIG signed by anl.gov zone
	Query to sdns.lbnl.net for anl.gov/A
	Received 741 bytes from 131.243.5.53
	;; Response received from [131.243.5.53] 741 octets ;; HEADER SECTION ;; id = 8070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== )`
	RRSIG=11793 and DNSKEY=11793 verifies the NSEC RRset
	NSEC proves no records of type A exist for anl.gov
	Found 1 RRSIGs over SOA RRset
	`anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== )`
	RRSIG=11793 and DNSKEY=11793 verifies the SOA RRset

anl.gov

	Query to t1dns2.anl.gov for anl.gov/A
	Received 741 bytes from 130.202.101.37
	;; Response received from [130.202.101.37] 741 octets ;; HEADER SECTION ;; id = 26325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	t1dns2.anl.gov is authoritative for anl.gov
	Found RRSIG signed by anl.gov zone
	Query to t1dns2.anl.gov for anl.gov/A
	Received 741 bytes from 130.202.101.37
	;; Response received from [130.202.101.37] 741 octets ;; HEADER SECTION ;; id = 32621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; anl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) anl.gov. 7200 IN SOA ( dns0.anl.gov. hostmaster.anl.gov. 2025100646 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== ) anl.gov. 7200 IN NSEC ( 0ec67e8445e83f4b3e138bf12277834f.anl.gov. NS SOA MX TXT RRSIG NSEC DNSKEY ) anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`anl.gov. 7200 IN RRSIG ( NSEC 8 2 7200 20251102233957 20251003224337 11793 anl.gov. Uc7F9C9PX81SZMGiGwG5cGDHmFHw2KmEt9wGCtUl3aXIKrpRTjqo6GiswFfu6+78pTYU4cSQ0vCk TjJF9ld2S/PDXDTtZhc+S1rPdgZeaUPdnj8tikVaUbVrSqzlzKMBygE5t+WQUckkUEHZ2gkpiv12 mtRSL/tlttDnC2AFVMklAPt2wpa1P8XbRZJ6rMsOITo7YoBJDmc+C5XvpW6ZuZVI/cdi3ns6krl2 zOk2E1ZwPkpIXSRbvadjYNgj8RDEe0IT98Pd1oGss8+dyAB0nnmfalHEildyskIYCEjaBlJu+QmV rEsiVgYao9kfzkPCDTieHn89RmLRGXpxKjxxZQ== )`
	RRSIG=11793 and DNSKEY=11793 verifies the NSEC RRset
	NSEC proves no records of type A exist for anl.gov
	Found 1 RRSIGs over SOA RRset
	`anl.gov. 7200 IN RRSIG ( SOA 8 2 86400 20251112124600 20251013114600 11793 anl.gov. lK9JGsXb7NnJkTszBpF4GUHGTl2if7v3FJ5ysz9vIEWJBRy5wZooLv7tqw5ksKj4J16R1X4jggXw p9kSkJZWypRv7yQmfe62dufG7bYTP9EYA93c0HIbfU+Vx7hK/MsxdReSH2ojfPnAl4Tf4cMI0JS8 IZoQO+zGNM1wP4OJcBrMtPmfXw7XyJkkkjOGonpokDvx+kqfwxTErJ+hHDaptD68tOKUlWxR/GH2 qPr9mQcD9eLxG+SCXSv5XxyLA2mHtFxVLzXCz1oz2pn75vfK4dvHkDv+QgOiJ8iWwTswOn1pPwLy cYAs2asF2swooiSkTfOdgtgj+nNxnK08eo0mJw== )`
	RRSIG=11793 and DNSKEY=11793 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test anl.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: