DNSSEC Analyzer - capitalgiftshop.gov

Domain Name:

Time: 2023-09-24 17:16:57 UTC, NTP stratum 4

Analyzing DNSSEC problems for capitalgiftshop.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (1139 octets) ;; HEADER SECTION ;; id = 56820 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to e.root-servers.net for capitalgiftshop.gov/A
	Received 686 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (686 octets) ;; HEADER SECTION ;; id = 33526 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . tTg+S05iF6tYI24Bs0KpnTfZUrJRHfORGjX4O1p8LMJ5WY19q4RUSt0ffmvXevhckeu0dqffzgpH 8u/NC1op8S0O+OP3KvPpmARx6H3BVKeRWp+q+nwtz6kseqIg3ukiVAksmxACElnqHwwSTpK4ku5V H48TesoBva54U1V2MhS1iD8gUEStt8s1aD+mdd/oVQ3Wvd1c5dHU9oteSwzZQfOsyFAmThi7fjCl 8la+1DGXtmVQ2sVvpSaJJrIF90rzGKyxKGCrz3ffqxSRTOIT96+MgKTmXN+8QmDyD/ACJAe1zmGD ZuRj3FL7ul0X9Kfv6fM6zGQNf4d/m8+ZiKz3nw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to l.root-servers.net for gov/DNSKEY
	Received 670 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (670 octets) ;; HEADER SECTION ;; id = 57603 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . tTg+S05iF6tYI24Bs0KpnTfZUrJRHfORGjX4O1p8LMJ5WY19q4RUSt0ffmvXevhckeu0dqffzgpH 8u/NC1op8S0O+OP3KvPpmARx6H3BVKeRWp+q+nwtz6kseqIg3ukiVAksmxACElnqHwwSTpK4ku5V H48TesoBva54U1V2MhS1iD8gUEStt8s1aD+mdd/oVQ3Wvd1c5dHU9oteSwzZQfOsyFAmThi7fjCl 8la+1DGXtmVQ2sVvpSaJJrIF90rzGKyxKGCrz3ffqxSRTOIT96+MgKTmXN+8QmDyD/ACJAe1zmGD ZuRj3FL7ul0X9Kfv6fM6zGQNf4d/m8+ZiKz3nw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 415 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (415 octets) ;; HEADER SECTION ;; id = 31070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . tTg+S05iF6tYI24Bs0KpnTfZUrJRHfORGjX4O1p8LMJ5WY19q4RUSt0ffmvXevhckeu0dqffzgpH 8u/NC1op8S0O+OP3KvPpmARx6H3BVKeRWp+q+nwtz6kseqIg3ukiVAksmxACElnqHwwSTpK4ku5V H48TesoBva54U1V2MhS1iD8gUEStt8s1aD+mdd/oVQ3Wvd1c5dHU9oteSwzZQfOsyFAmThi7fjCl 8la+1DGXtmVQ2sVvpSaJJrIF90rzGKyxKGCrz3ffqxSRTOIT96+MgKTmXN+8QmDyD/ACJAe1zmGD ZuRj3FL7ul0X9Kfv6fM6zGQNf4d/m8+ZiKz3nw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . tTg+S05iF6tYI24Bs0KpnTfZUrJRHfORGjX4O1p8LMJ5WY19q4RUSt0ffmvXevhckeu0dqffzgpH 8u/NC1op8S0O+OP3KvPpmARx6H3BVKeRWp+q+nwtz6kseqIg3ukiVAksmxACElnqHwwSTpK4ku5V H48TesoBva54U1V2MhS1iD8gUEStt8s1aD+mdd/oVQ3Wvd1c5dHU9oteSwzZQfOsyFAmThi7fjCl 8la+1DGXtmVQ2sVvpSaJJrIF90rzGKyxKGCrz3ffqxSRTOIT96+MgKTmXN+8QmDyD/ACJAe1zmGD ZuRj3FL7ul0X9Kfv6fM6zGQNf4d/m8+ZiKz3nw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to d.gov-servers.net for gov/DNSKEY
	Received 1233 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (1233 octets) ;; HEADER SECTION ;; id = 3098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (5 records) gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcvA+2gDUzQ8CrZNef0l31+89Y1gUM8rPtvpC9E3HNsYoOxe3r0NVuWjafg5zXzkRnHhw0L9 nBIQH8cqEeFKg3bJx2i8dj4N9YXmmhkLHuE0JJ9+JrZQpWRY9AQPsG3l2RLnL6Vato0IIweFWF+7 oWVM0xMoB6wjI0XTB+tO1x3a/wuGs7cTPBM4RzvKqsY36/bICi+QNVIesASaGNrFqs0= ) ; Key ID = 40921 gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231008040000 20230923035500 7698 gov. ZwUS8pkBdeVIiXrdTNAFO7hm3WBpzd5rmcMSg3ewi7Z7Gb6jjyqePCEVUOzrTZzY+CRSknDVQQc7 QAHTkqPG6pvFDWxDkEgBMAU33rSxxussGS6IROb6Pz/REaEHbxsdYmIdfk/HhDNj9v2XQlK4/O7g iIVqwiTlwTBRyryqKZYVBgXCvIWd5wWVPAz5ncDjgrelVa3WlsKK9R9wdMrIWpBO8hkZl8b/nUiO P66iKOJ/u08cZ3hJFvyGNMBBG8hdydVlTcebkU20eeEfI4ajEuzPUKhV7sEOvD4CXSbQaChutrFP ZaCgmk85dtnzdxBQqyeLstU7LY0KOFw/Iwz2fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcvA+2gDUzQ8CrZNef0l31+89Y1gUM8rPtvpC9E3HNsYoOxe3r0NVuWjafg5zXzkRnHhw0L9 nBIQH8cqEeFKg3bJx2i8dj4N9YXmmhkLHuE0JJ9+JrZQpWRY9AQPsG3l2RLnL6Vato0IIweFWF+7 oWVM0xMoB6wjI0XTB+tO1x3a/wuGs7cTPBM4RzvKqsY36/bICi+QNVIesASaGNrFqs0= ) ; Key ID = 40921`
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231008040000 20230923035500 7698 gov. ZwUS8pkBdeVIiXrdTNAFO7hm3WBpzd5rmcMSg3ewi7Z7Gb6jjyqePCEVUOzrTZzY+CRSknDVQQc7 QAHTkqPG6pvFDWxDkEgBMAU33rSxxussGS6IROb6Pz/REaEHbxsdYmIdfk/HhDNj9v2XQlK4/O7g iIVqwiTlwTBRyryqKZYVBgXCvIWd5wWVPAz5ncDjgrelVa3WlsKK9R9wdMrIWpBO8hkZl8b/nUiO P66iKOJ/u08cZ3hJFvyGNMBBG8hdydVlTcebkU20eeEfI4ajEuzPUKhV7sEOvD4CXSbQaChutrFP ZaCgmk85dtnzdxBQqyeLstU7LY0KOFw/Iwz2fw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40921 is now in the chain-of-trust
	DNSKEY=10104 is now in the chain-of-trust
	Query to c.gov-servers.net for capitalgiftshop.gov/A
	Received 510 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (510 octets) ;; HEADER SECTION ;; id = 31809 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) capitalgiftshop.gov. 86400 IN NS ns2.aoc.gov. capitalgiftshop.gov. 86400 IN NS ns3.comcastbusiness.net. capitalgiftshop.gov. 86400 IN NS authns1.centurylink.net. capitalgiftshop.gov. 86400 IN NS authns2.centurylink.net. capitalgiftshop.gov. 86400 IN NS ns1.aoc.gov. capitalgiftshop.gov. 86400 IN NS ns2.comcastbusiness.net. capitalgiftshop.gov. 3600 IN DS ( 43651 8 1 29907f131ce563003980d8532d626103b5df03fd ) capitalgiftshop.gov. 3600 IN DS ( 43651 8 2 499f1453642dfd961987ad644bb578056dc6f30cbe0dcdf74596203bdea4e769 ) capitalgiftshop.gov. 3600 IN RRSIG ( DS 8 2 3600 20230929034353 20230922034353 40921 gov. hnELFKfdVRnBKTH26Nply8f/yOfgko14JtxcoOIRDtktjZ57PCLivGR5S9pMR9p5COyTLmUmAbRJ 4LYhQY9yy3B5EY7zRHxStruU97a2qgpeKwNs/XsW/NO67HcKcJbQ4xBQP89dIxkG4nRotK90+kgq VmyCezzJo3wxzu2OG4BjMyWMYLIVkxnKQkwNpu3Ipkoa1DMy5Ez8a4f5gHJwkQ== ) ;; ADDITIONAL SECTION (3 records) ns1.aoc.gov. 86400 IN A 161.197.102.14 ns2.aoc.gov. 86400 IN A 161.197.100.14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for capitalgiftshop.gov/DNSKEY
	Received 510 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (510 octets) ;; HEADER SECTION ;; id = 19445 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) capitalgiftshop.gov. 86400 IN NS ns2.aoc.gov. capitalgiftshop.gov. 86400 IN NS authns1.centurylink.net. capitalgiftshop.gov. 86400 IN NS ns1.aoc.gov. capitalgiftshop.gov. 86400 IN NS authns2.centurylink.net. capitalgiftshop.gov. 86400 IN NS ns3.comcastbusiness.net. capitalgiftshop.gov. 86400 IN NS ns2.comcastbusiness.net. capitalgiftshop.gov. 3600 IN DS ( 43651 8 1 29907f131ce563003980d8532d626103b5df03fd ) capitalgiftshop.gov. 3600 IN DS ( 43651 8 2 499f1453642dfd961987ad644bb578056dc6f30cbe0dcdf74596203bdea4e769 ) capitalgiftshop.gov. 3600 IN RRSIG ( DS 8 2 3600 20230929034353 20230922034353 40921 gov. hnELFKfdVRnBKTH26Nply8f/yOfgko14JtxcoOIRDtktjZ57PCLivGR5S9pMR9p5COyTLmUmAbRJ 4LYhQY9yy3B5EY7zRHxStruU97a2qgpeKwNs/XsW/NO67HcKcJbQ4xBQP89dIxkG4nRotK90+kgq VmyCezzJo3wxzu2OG4BjMyWMYLIVkxnKQkwNpu3Ipkoa1DMy5Ez8a4f5gHJwkQ== ) ;; ADDITIONAL SECTION (3 records) ns1.aoc.gov. 86400 IN A 161.197.102.14 ns2.aoc.gov. 86400 IN A 161.197.100.14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone capitalgiftshop.gov

capitalgiftshop.gov

	Checking DS between gov and capitalgiftshop.gov
	Query to d.gov-servers.net for capitalgiftshop.gov/DS
	Received 327 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (327 octets) ;; HEADER SECTION ;; id = 58 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN DS ;; ANSWER SECTION (3 records) capitalgiftshop.gov. 3600 IN DS ( 43651 8 1 29907f131ce563003980d8532d626103b5df03fd ) capitalgiftshop.gov. 3600 IN DS ( 43651 8 2 499f1453642dfd961987ad644bb578056dc6f30cbe0dcdf74596203bdea4e769 ) capitalgiftshop.gov. 3600 IN RRSIG ( DS 8 2 3600 20230929034353 20230922034353 40921 gov. hnELFKfdVRnBKTH26Nply8f/yOfgko14JtxcoOIRDtktjZ57PCLivGR5S9pMR9p5COyTLmUmAbRJ 4LYhQY9yy3B5EY7zRHxStruU97a2qgpeKwNs/XsW/NO67HcKcJbQ4xBQP89dIxkG4nRotK90+kgq VmyCezzJo3wxzu2OG4BjMyWMYLIVkxnKQkwNpu3Ipkoa1DMy5Ez8a4f5gHJwkQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for capitalgiftshop.gov in the gov zone
	DS=43651/SHA-1 has algorithm RSASHA256
	DS=43651/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`capitalgiftshop.gov. 3600 IN RRSIG ( DS 8 2 3600 20230929034353 20230922034353 40921 gov. hnELFKfdVRnBKTH26Nply8f/yOfgko14JtxcoOIRDtktjZ57PCLivGR5S9pMR9p5COyTLmUmAbRJ 4LYhQY9yy3B5EY7zRHxStruU97a2qgpeKwNs/XsW/NO67HcKcJbQ4xBQP89dIxkG4nRotK90+kgq VmyCezzJo3wxzu2OG4BjMyWMYLIVkxnKQkwNpu3Ipkoa1DMy5Ez8a4f5gHJwkQ== )`
	RRSIG=40921 and DNSKEY=40921 verifies the DS RRset
	DS=43651/SHA-1 is now in the chain-of-trust
	`capitalgiftshop.gov. 3600 IN DS ( 43651 8 1 29907f131ce563003980d8532d626103b5df03fd )`
	`capitalgiftshop.gov. 3600 IN DS ( 43651 8 2 499f1453642dfd961987ad644bb578056dc6f30cbe0dcdf74596203bdea4e769 )`
	Query to authns2.centurylink.net for capitalgiftshop.gov/DNSKEY
	Received 1837 bytes from 208.44.130.120
	;; Response received from 208.44.130.120 (1837 octets) ;; HEADER SECTION ;; id = 62679 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN DNSKEY ;; ANSWER SECTION (8 records) capitalgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAdbqPdyUUwMXkQWeTvs2e/o1vfSxDpwZNqxkTHg/f+pTKAfQfm1GVU8UP4HlCaCkeocOC10Z rOd3qjlcv+ughNM0JkXhDbW1m5RiJnLozZA5iCS9YX6XJBh8MtJ8ipYhtXGQdjrlUXpNfgjt0+wd tjwf7+5WCl45uY9V/We6cDCt ) ; Key ID = 19786 capitalgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAfbddHv1XEZ0RFJjjKlJaP5hRXlUt6Q1rKhbHUIg9WXKEs3sEfjLlzC6PK5WMqEqpi0D22b9 TrXAuFkkpobOV0j7VcSSuiE/iUq8q7ih8uaGq/PXnFmjEuzkIlepdEEGlpRhWatUIGxBJ4qj9yka XVwcLUBwGxl1Z2U2H0J3rcO/ ) ; Key ID = 54426 capitalgiftshop.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAZWtK0KkofQKZhfL9vGvVIKDvfbcPXr6R7YHgVWF9TcceupXiT71Rt0b+bTGVHtgZvXMUYn7 BrIdU9XmW6lmshqgyxOX3VNPIDlBUfevM6Eg/ItGXQHJRFfdEu6uqSdmSY7R2YVGllZw3Jc58srw JochiUwZqYbrpL5WA3xfvQzQrOGc2MPZugUtdyyTVPFSA/sDYCS9X+5J9e2hTcPUcWdJs3HC24Zu 72pzWC8Z3ZkYfSAHvpY0KlfOST0VpC4bkJRVG7v8bfAQ58Q0xzkKrSfP1GSE3fF9U+mOIl32kDNP eLT6uhe+dvwmbsDAB5Yqv+Hl4vRR7fUV90fb/QFeG0s= ) ; Key ID = 60185 capitalgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAbx3DrADwknQsYbg9XbLVTObcdJI0vIgld8MMdiZMNDXYlOKPCXKRZAUXzfuvTHJbSoswTeD 3qXXUz8s8b86wavkh35ZoyNkAVEDbH4OBxjuNp5NSfauVUOdJQ+oS3PWcFbap1oAx5NbaJSxTZc5 udXbMZegIUHUam/OK37ROaWt ) ; Key ID = 124 capitalgiftshop.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAcsiGssW2vbVfxSuSzh92JQjz4ca+LpV/xPWwAF0GeouX6edSc+t26yo3c8ZjaQofPc5cs6y 4GLYTmAIG2sh0pa14kh6sOJJZ1rnLv7/Tea1MQdpLmfTinCA1Or15u40JUN+0SXdOS/feoip/Jga isdbBLUZvjS2Tnl0KjhzMixGd7p/wLYNBDjwaGYmyiwSZEbC8sZ4/8fiKxLw0t7MdL7yhpXNqCTm KfZusOnbY3MljucUMBMPo/HXIOI4WPuJHbzsdYTOokPkVmoDHF3F47jjFo6UCosGNhnnZIUC7YTT 5fcv4OqeHmr1qf0X20dbFkuX+zOo2gYfuEB4XH/5hrc= ) ; Key ID = 43651 capitalgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230928104530 20230924095155 124 capitalgiftshop.gov. aCH9QaGcCaf2kyzXgAqKZInMUt593T3w1HNCLj85pidkCjT6La3Svn67aIvBhuYuFnUxb5jjLZkN CGsrAChuNRGBVqA7to9AKW5zEU207vXSuDRtpIAOVvlqbflRaRYtnYXQNlcV1ZV4a9Z/yK+Lzfuc At8oMU2R1/dYmaz1k9k= ) capitalgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230928104530 20230924095155 43651 capitalgiftshop.gov. Hz7TEGjGgdBNw/9kP/+QUTnQ+vskT4CInm4BCS/Bw5y2w3xcA5c9PI/uM/7gmrdzISQtrO//iZzn sccUskvlkPoO+6AVxzO/PVhX8mBQoHQlcGO0dK6F+bXKHdY5BBU0JmdaG1SxRM5jXrewAEXkHPpL 8Y8PuuA8Q4Joq+o33zVXBYD6XTC2FW2Ax6TkRXJGd4PfD/c99JyW5ppBnEHFFGxvn1uh/1tj4IYQ Nu6zRAGTBkP2jOFgcx+CPhlW1nfwGaWKz0Zn0dXs6U2wnn0OUgWWDO9qRlMUYtDyxRfRD5eEMdo+ 5vGONjZU8NE4NMe8xvgT/dDC5kBxOVuQkGKeIg== ) capitalgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230928104530 20230924095155 60185 capitalgiftshop.gov. aOGMTZtx+Vsxdfms2zRvI7TFAyNIec51PBvC5vcCAd/x1Ejb4oc5zjG4qXFs0Xpxzi1zGf8TxRQP 6Q99U/AxHwax+gKPSl+MNKdonbBbZBgcKvb9mKx2hqPcF1yrFt0RwjY3qdCz9WX68WROq1qgj5wP FJpWhC5y1AI4/j7w0A5rFFN6tNHwa9b7PD3YsLh5hc+MwVnr7YRE3540v24zLqQbeRQDRQOwJL3+ dy19/BmjKFlBGKk5gXZL21YAfDqu6ZBNoBeqwaUZi2dWbBg4ER5mzIpU/QU0NEmZXvi1dS7MsYGy ZWG2yTZ3SEFrqE/sc3PtfxihpRKdfAxEPyaNCw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DNSKEY records for capitalgiftshop.gov
	`capitalgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAdbqPdyUUwMXkQWeTvs2e/o1vfSxDpwZNqxkTHg/f+pTKAfQfm1GVU8UP4HlCaCkeocOC10Z rOd3qjlcv+ughNM0JkXhDbW1m5RiJnLozZA5iCS9YX6XJBh8MtJ8ipYhtXGQdjrlUXpNfgjt0+wd tjwf7+5WCl45uY9V/We6cDCt ) ; Key ID = 19786`
	`capitalgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAfbddHv1XEZ0RFJjjKlJaP5hRXlUt6Q1rKhbHUIg9WXKEs3sEfjLlzC6PK5WMqEqpi0D22b9 TrXAuFkkpobOV0j7VcSSuiE/iUq8q7ih8uaGq/PXnFmjEuzkIlepdEEGlpRhWatUIGxBJ4qj9yka XVwcLUBwGxl1Z2U2H0J3rcO/ ) ; Key ID = 54426`
	`capitalgiftshop.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAZWtK0KkofQKZhfL9vGvVIKDvfbcPXr6R7YHgVWF9TcceupXiT71Rt0b+bTGVHtgZvXMUYn7 BrIdU9XmW6lmshqgyxOX3VNPIDlBUfevM6Eg/ItGXQHJRFfdEu6uqSdmSY7R2YVGllZw3Jc58srw JochiUwZqYbrpL5WA3xfvQzQrOGc2MPZugUtdyyTVPFSA/sDYCS9X+5J9e2hTcPUcWdJs3HC24Zu 72pzWC8Z3ZkYfSAHvpY0KlfOST0VpC4bkJRVG7v8bfAQ58Q0xzkKrSfP1GSE3fF9U+mOIl32kDNP eLT6uhe+dvwmbsDAB5Yqv+Hl4vRR7fUV90fb/QFeG0s= ) ; Key ID = 60185`
	`capitalgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAbx3DrADwknQsYbg9XbLVTObcdJI0vIgld8MMdiZMNDXYlOKPCXKRZAUXzfuvTHJbSoswTeD 3qXXUz8s8b86wavkh35ZoyNkAVEDbH4OBxjuNp5NSfauVUOdJQ+oS3PWcFbap1oAx5NbaJSxTZc5 udXbMZegIUHUam/OK37ROaWt ) ; Key ID = 124`
	`capitalgiftshop.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAcsiGssW2vbVfxSuSzh92JQjz4ca+LpV/xPWwAF0GeouX6edSc+t26yo3c8ZjaQofPc5cs6y 4GLYTmAIG2sh0pa14kh6sOJJZ1rnLv7/Tea1MQdpLmfTinCA1Or15u40JUN+0SXdOS/feoip/Jga isdbBLUZvjS2Tnl0KjhzMixGd7p/wLYNBDjwaGYmyiwSZEbC8sZ4/8fiKxLw0t7MdL7yhpXNqCTm KfZusOnbY3MljucUMBMPo/HXIOI4WPuJHbzsdYTOokPkVmoDHF3F47jjFo6UCosGNhnnZIUC7YTT 5fcv4OqeHmr1qf0X20dbFkuX+zOo2gYfuEB4XH/5hrc= ) ; Key ID = 43651`
	DNSKEY=43651/SEP is now in the chain-of-trust
	DS=43651/SHA-1 verifies DNSKEY=43651/SEP
	DS=43651/SHA-256 verifies DNSKEY=43651/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`capitalgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230928104530 20230924095155 124 capitalgiftshop.gov. aCH9QaGcCaf2kyzXgAqKZInMUt593T3w1HNCLj85pidkCjT6La3Svn67aIvBhuYuFnUxb5jjLZkN CGsrAChuNRGBVqA7to9AKW5zEU207vXSuDRtpIAOVvlqbflRaRYtnYXQNlcV1ZV4a9Z/yK+Lzfuc At8oMU2R1/dYmaz1k9k= )`
	`capitalgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230928104530 20230924095155 43651 capitalgiftshop.gov. Hz7TEGjGgdBNw/9kP/+QUTnQ+vskT4CInm4BCS/Bw5y2w3xcA5c9PI/uM/7gmrdzISQtrO//iZzn sccUskvlkPoO+6AVxzO/PVhX8mBQoHQlcGO0dK6F+bXKHdY5BBU0JmdaG1SxRM5jXrewAEXkHPpL 8Y8PuuA8Q4Joq+o33zVXBYD6XTC2FW2Ax6TkRXJGd4PfD/c99JyW5ppBnEHFFGxvn1uh/1tj4IYQ Nu6zRAGTBkP2jOFgcx+CPhlW1nfwGaWKz0Zn0dXs6U2wnn0OUgWWDO9qRlMUYtDyxRfRD5eEMdo+ 5vGONjZU8NE4NMe8xvgT/dDC5kBxOVuQkGKeIg== )`
	`capitalgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20230928104530 20230924095155 60185 capitalgiftshop.gov. aOGMTZtx+Vsxdfms2zRvI7TFAyNIec51PBvC5vcCAd/x1Ejb4oc5zjG4qXFs0Xpxzi1zGf8TxRQP 6Q99U/AxHwax+gKPSl+MNKdonbBbZBgcKvb9mKx2hqPcF1yrFt0RwjY3qdCz9WX68WROq1qgj5wP FJpWhC5y1AI4/j7w0A5rFFN6tNHwa9b7PD3YsLh5hc+MwVnr7YRE3540v24zLqQbeRQDRQOwJL3+ dy19/BmjKFlBGKk5gXZL21YAfDqu6ZBNoBeqwaUZi2dWbBg4ER5mzIpU/QU0NEmZXvi1dS7MsYGy ZWG2yTZ3SEFrqE/sc3PtfxihpRKdfAxEPyaNCw== )`
	RRSIG=124 and DNSKEY=124 verifies the DNSKEY RRset
	RRSIG=43651 and DNSKEY=43651/SEP verifies the DNSKEY RRset
	RRSIG=60185 and DNSKEY=60185/SEP verifies the DNSKEY RRset
	DNSKEY=19786 is now in the chain-of-trust
	DNSKEY=54426 is now in the chain-of-trust
	DNSKEY=60185/SEP is now in the chain-of-trust
	DNSKEY=124 is now in the chain-of-trust
	Query to ns1.aoc.gov for capitalgiftshop.gov/A
	Received 506 bytes from 161.197.102.14
	;; Response received from 161.197.102.14 (506 octets) ;; HEADER SECTION ;; id = 23213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns1.aoc.gov is authoritative for capitalgiftshop.gov
	Found RRSIG signed by capitalgiftshop.gov zone
	Query to authns1.centurylink.net for capitalgiftshop.gov/SOA
	Received 1058 bytes from 63.150.72.4
	;; Response received from 63.150.72.4 (1058 octets) ;; HEADER SECTION ;; id = 46517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) capitalgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) ;; AUTHORITY SECTION (7 records) capitalgiftshop.gov. 28800 IN NS ns1.aoc.gov. capitalgiftshop.gov. 28800 IN NS authns2.centurylink.net. capitalgiftshop.gov. 28800 IN NS ns3.comcastbusiness.net. capitalgiftshop.gov. 28800 IN NS ns2.comcastbusiness.net. capitalgiftshop.gov. 28800 IN NS authns1.centurylink.net. capitalgiftshop.gov. 28800 IN NS ns2.aoc.gov. capitalgiftshop.gov. 28800 IN RRSIG ( NS 8 2 28800 20230928104530 20230924095155 124 capitalgiftshop.gov. FyB7NjX9646X7sLmd3EF0bVpif68WteveL80sOsJ45IUby6pBN/raTj+ay/L4+6hPoVwx+fJywZ0 NOdPNqSXN9gTicXa6+TVAGruLCmAZeu5OVIjIA+gCCz+McCYvvslB3nCD8iOnMQvmiiZ0+Ifiajf fvAnvdkx1L1bHmfFRoE= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20230928020636 20230924014422 406 aoc.gov. FRsjlBPJl5ifYTGEkBQ87b5vZ/ViQ95OgZ0c6472+dHf063B1jx430H4k/xN8uFij4rFp9A43tzr IYKfxDVMCqKCM9Z/odh0G73G71NSQ0M/ofEoTlZ0lTuk4cWrF1SyI1H+aC7O99JCGofQ0LXmczJZ UhmKR+mNTrXbQ1joZTw= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20230928005943 20230924003123 406 aoc.gov. Cn9YADT742I6lLtg2YLa8hG+Z5Dwqf08hEUgu61K3vMtu3NTVI1rczaxIsVj+6JImXzBY4o5utnb SobB5qRquwpqWkwL+UMKLYZsNNdJC2CMuoTqIwVhfbLJVJI/eOVnJaq8h6flL37FcdSuJVlS0YuX foFckHZCkCcQH9nvazg= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.aoc.gov for capitalgiftshop.gov/SOA
	Received 285 bytes from 161.197.100.14
	;; Response received from 161.197.100.14 (285 octets) ;; HEADER SECTION ;; id = 775 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) capitalgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns3.comcastbusiness.net for capitalgiftshop.gov/SOA
	Received 282 bytes from 68.87.76.228
	;; Response received from 68.87.76.228 (282 octets) ;; HEADER SECTION ;; id = 29239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) capitalgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to authns2.centurylink.net for capitalgiftshop.gov/SOA
	Received 1058 bytes from 208.44.130.120
	;; Response received from 208.44.130.120 (1058 octets) ;; HEADER SECTION ;; id = 60787 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) capitalgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) ;; AUTHORITY SECTION (7 records) capitalgiftshop.gov. 28800 IN NS ns1.aoc.gov. capitalgiftshop.gov. 28800 IN NS ns3.comcastbusiness.net. capitalgiftshop.gov. 28800 IN NS authns1.centurylink.net. capitalgiftshop.gov. 28800 IN NS ns2.comcastbusiness.net. capitalgiftshop.gov. 28800 IN NS authns2.centurylink.net. capitalgiftshop.gov. 28800 IN NS ns2.aoc.gov. capitalgiftshop.gov. 28800 IN RRSIG ( NS 8 2 28800 20230928104530 20230924095155 124 capitalgiftshop.gov. FyB7NjX9646X7sLmd3EF0bVpif68WteveL80sOsJ45IUby6pBN/raTj+ay/L4+6hPoVwx+fJywZ0 NOdPNqSXN9gTicXa6+TVAGruLCmAZeu5OVIjIA+gCCz+McCYvvslB3nCD8iOnMQvmiiZ0+Ifiajf fvAnvdkx1L1bHmfFRoE= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20230928020636 20230924014422 406 aoc.gov. FRsjlBPJl5ifYTGEkBQ87b5vZ/ViQ95OgZ0c6472+dHf063B1jx430H4k/xN8uFij4rFp9A43tzr IYKfxDVMCqKCM9Z/odh0G73G71NSQ0M/ofEoTlZ0lTuk4cWrF1SyI1H+aC7O99JCGofQ0LXmczJZ UhmKR+mNTrXbQ1joZTw= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20230928005943 20230924003123 406 aoc.gov. Cn9YADT742I6lLtg2YLa8hG+Z5Dwqf08hEUgu61K3vMtu3NTVI1rczaxIsVj+6JImXzBY4o5utnb SobB5qRquwpqWkwL+UMKLYZsNNdJC2CMuoTqIwVhfbLJVJI/eOVnJaq8h6flL37FcdSuJVlS0YuX foFckHZCkCcQH9nvazg= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.comcastbusiness.net for capitalgiftshop.gov/SOA
	Received 282 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (282 octets) ;; HEADER SECTION ;; id = 23752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) capitalgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.aoc.gov for capitalgiftshop.gov/A
	Received 506 bytes from 161.197.102.14
	;; Response received from 161.197.102.14 (506 octets) ;; HEADER SECTION ;; id = 1376 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= )`
	RRSIG=124 and DNSKEY=124 verifies the NSEC RRset
	NSEC proves no records of type A exist for capitalgiftshop.gov
	Found 1 RRSIGs over SOA RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= )`
	RRSIG=124 and DNSKEY=124 verifies the SOA RRset

capitalgiftshop.gov

	Query to ns2.aoc.gov for capitalgiftshop.gov/A
	Received 506 bytes from 161.197.100.14
	;; Response received from 161.197.100.14 (506 octets) ;; HEADER SECTION ;; id = 22409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns2.aoc.gov is authoritative for capitalgiftshop.gov
	Found RRSIG signed by capitalgiftshop.gov zone
	Query to ns2.aoc.gov for capitalgiftshop.gov/A
	Received 506 bytes from 161.197.100.14
	;; Response received from 161.197.100.14 (506 octets) ;; HEADER SECTION ;; id = 10446 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= )`
	RRSIG=124 and DNSKEY=124 verifies the NSEC RRset
	NSEC proves no records of type A exist for capitalgiftshop.gov
	Found 1 RRSIGs over SOA RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= )`
	RRSIG=124 and DNSKEY=124 verifies the SOA RRset

capitalgiftshop.gov

	Query to authns1.centurylink.net for capitalgiftshop.gov/A
	Received 503 bytes from 63.150.72.4
	;; Response received from 63.150.72.4 (503 octets) ;; HEADER SECTION ;; id = 8331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	authns1.centurylink.net is authoritative for capitalgiftshop.gov
	Found RRSIG signed by capitalgiftshop.gov zone
	Query to authns1.centurylink.net for capitalgiftshop.gov/A
	Received 503 bytes from 63.150.72.4
	;; Response received from 63.150.72.4 (503 octets) ;; HEADER SECTION ;; id = 23322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= )`
	RRSIG=124 and DNSKEY=124 verifies the NSEC RRset
	NSEC proves no records of type A exist for capitalgiftshop.gov
	Found 1 RRSIGs over SOA RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= )`
	RRSIG=124 and DNSKEY=124 verifies the SOA RRset

capitalgiftshop.gov

	Query to authns2.centurylink.net for capitalgiftshop.gov/A
	Received 503 bytes from 208.44.130.120
	;; Response received from 208.44.130.120 (503 octets) ;; HEADER SECTION ;; id = 11428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	authns2.centurylink.net is authoritative for capitalgiftshop.gov
	Found RRSIG signed by capitalgiftshop.gov zone
	Query to authns2.centurylink.net for capitalgiftshop.gov/A
	Received 503 bytes from 208.44.130.120
	;; Response received from 208.44.130.120 (503 octets) ;; HEADER SECTION ;; id = 37058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= )`
	RRSIG=124 and DNSKEY=124 verifies the NSEC RRset
	NSEC proves no records of type A exist for capitalgiftshop.gov
	Found 1 RRSIGs over SOA RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= )`
	RRSIG=124 and DNSKEY=124 verifies the SOA RRset

capitalgiftshop.gov

	Query to ns3.comcastbusiness.net for capitalgiftshop.gov/A
	Received 503 bytes from 68.87.76.228
	;; Response received from 68.87.76.228 (503 octets) ;; HEADER SECTION ;; id = 28740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns3.comcastbusiness.net is authoritative for capitalgiftshop.gov
	Found RRSIG signed by capitalgiftshop.gov zone
	Query to ns3.comcastbusiness.net for capitalgiftshop.gov/A
	Received 503 bytes from 68.87.76.228
	;; Response received from 68.87.76.228 (503 octets) ;; HEADER SECTION ;; id = 47755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= )`
	RRSIG=124 and DNSKEY=124 verifies the NSEC RRset
	NSEC proves no records of type A exist for capitalgiftshop.gov
	Found 1 RRSIGs over SOA RRset
	`capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= )`
	RRSIG=124 and DNSKEY=124 verifies the SOA RRset

capitalgiftshop.gov

	Query to ns2.comcastbusiness.net for capitalgiftshop.gov/A
	Received 503 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (503 octets) ;; HEADER SECTION ;; id = 25797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.comcastbusiness.net is authoritative for capitalgiftshop.gov
	Found RRSIG signed by capitalgiftshop.gov zone
	Query to ns2.comcastbusiness.net for capitalgiftshop.gov/A
	Received 503 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (503 octets) ;; HEADER SECTION ;; id = 15208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; capitalgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) capitalgiftshop.gov. 900 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 1962 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= ) capitalgiftshop.gov. 900 IN NSEC ( capitalgiftshop.gov. NS SOA RRSIG NSEC DNSKEY ) capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`capitalgiftshop.gov. 900 IN RRSIG ( NSEC 8 2 900 20230928104530 20230924095155 124 capitalgiftshop.gov. fUN99SGzGpNxn5/9Ai/6ulZbM4jE+7ahwbknJmcbY46YHetXulXWWVzculwbO5iI22tMVOFT4MJT Vrma00Gpr2HGVu8fyhZFzWddysMJDgmnc5DaGLbCGma0lsvjiNL4MGukyB7YZR1mNnDmcs8sR2aK OlcTrCOmXgZmdlwOadA= )`
	RRSIG=124 and DNSKEY=124 verifies the NSEC RRset
	NSEC proves no records of type A exist for capitalgiftshop.gov
	Found 1 RRSIGs over SOA RRset
	`capitalgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20230928105155 20230924095155 124 capitalgiftshop.gov. ZWh5srF3TRkj0kNTDZ8DnH3p81JN+tb2ywK6dKUVkL+fu5JN68KWqexh9CpWOYrOjIH6fLIJCucr EqWDg2C2X4m4pbRzzkMCf00UGP7FLLxeThrI6QwQwo7vOa3C2G2WXdJY2AVKt4Bvcj27xQKaagIk mHctW/JUo9zZD4QOqwM= )`
	RRSIG=124 and DNSKEY=124 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test capitalgiftshop.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: