DNSSEC Debugger - census.gov

Domain Name:

Time: 2026-02-15 07:17:41 UTC

Analyzing DNSSEC problems for census.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 55509 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to h.root-servers.net for census.gov/A
	Received 617 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 617 octets ;; HEADER SECTION ;; id = 40374 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . ojZQuaw665eaworBxR32Ux3kWVMF/TzFEnEpI9Ln/gRKPqhlmtANYbX0PqT1FOQV5xhZSVy9msT2 zADQOUJsmEQkA1d8cYXEPKYmH62R6YDYc8cKJYzQC11eYRgg8IL4I8hLMYtuzR3xCZj3u6ljWkM0 McK+Zykxp2HILrYOXC17eR1ohYRx4ky9cTRZK1B1UmvCHX2V3w2A6ReuGL1+YFWeZdykTzwfi6Yi odIQSYH8iDk6WqByE72U9ouPDfWx6iL+c8NeO89slpytwhw4pXyEne8KIG0SroMR2cBsgeso5nov RBrhqvE3bVIIXm7l3ZK7mX3jGYqhngjGcEArmg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 613 octets ;; HEADER SECTION ;; id = 14910 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . ojZQuaw665eaworBxR32Ux3kWVMF/TzFEnEpI9Ln/gRKPqhlmtANYbX0PqT1FOQV5xhZSVy9msT2 zADQOUJsmEQkA1d8cYXEPKYmH62R6YDYc8cKJYzQC11eYRgg8IL4I8hLMYtuzR3xCZj3u6ljWkM0 McK+Zykxp2HILrYOXC17eR1ohYRx4ky9cTRZK1B1UmvCHX2V3w2A6ReuGL1+YFWeZdykTzwfi6Yi odIQSYH8iDk6WqByE72U9ouPDfWx6iL+c8NeO89slpytwhw4pXyEne8KIG0SroMR2cBsgeso5nov RBrhqvE3bVIIXm7l3ZK7mX3jGYqhngjGcEArmg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 11534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . ojZQuaw665eaworBxR32Ux3kWVMF/TzFEnEpI9Ln/gRKPqhlmtANYbX0PqT1FOQV5xhZSVy9msT2 zADQOUJsmEQkA1d8cYXEPKYmH62R6YDYc8cKJYzQC11eYRgg8IL4I8hLMYtuzR3xCZj3u6ljWkM0 McK+Zykxp2HILrYOXC17eR1ohYRx4ky9cTRZK1B1UmvCHX2V3w2A6ReuGL1+YFWeZdykTzwfi6Yi odIQSYH8iDk6WqByE72U9ouPDfWx6iL+c8NeO89slpytwhw4pXyEne8KIG0SroMR2cBsgeso5nov RBrhqvE3bVIIXm7l3ZK7mX3jGYqhngjGcEArmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . ojZQuaw665eaworBxR32Ux3kWVMF/TzFEnEpI9Ln/gRKPqhlmtANYbX0PqT1FOQV5xhZSVy9msT2 zADQOUJsmEQkA1d8cYXEPKYmH62R6YDYc8cKJYzQC11eYRgg8IL4I8hLMYtuzR3xCZj3u6ljWkM0 McK+Zykxp2HILrYOXC17eR1ohYRx4ky9cTRZK1B1UmvCHX2V3w2A6ReuGL1+YFWeZdykTzwfi6Yi odIQSYH8iDk6WqByE72U9ouPDfWx6iL+c8NeO89slpytwhw4pXyEne8KIG0SroMR2cBsgeso5nov RBrhqvE3bVIIXm7l3ZK7mX3jGYqhngjGcEArmg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 19116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260325110622 20260123110622 2536 gov. 1Yi8jf2XMbTmgyRtyAql82WHrDi/8ytE7icJRnRPcCVnXyEt3A8YdXw6HrWtpNUl/JkqW97k8CkQ IcmdNBTspg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260325110622 20260123110622 2536 gov. 1Yi8jf2XMbTmgyRtyAql82WHrDi/8ytE7icJRnRPcCVnXyEt3A8YdXw6HrWtpNUl/JkqW97k8CkQ IcmdNBTspg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for census.gov/A
	Received 456 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 456 octets ;; HEADER SECTION ;; id = 12019 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) census.gov. 10800 IN NS ns1e.census.gov. census.gov. 10800 IN NS ns2e.census.gov. census.gov. 3600 IN DS ( 38584 8 2 aecf1415107033bff6c71a71b814538f553e9fe8edb6e4cb3e0a9d8ea83e8f91 ) census.gov. 3600 IN DS ( 54670 8 2 0db62e8dad5f492adf050d2b36ba29ca1daad9c49cacf4e12c293f939b151c3c ) census.gov. 3600 IN DS ( 63460 7 2 edbed9d0f2d04bccd6beb6310eb7327469a27c024e24778ac63422f69316bfc5 ) census.gov. 3600 IN DS ( 9606 7 2 f78ac01e59776fe73bd15b7de474cac666146a45ca41b19bc47c37695ee2e8b9 ) census.gov. 3600 IN RRSIG ( DS 13 2 3600 20260216081741 20260214061741 35496 gov. 63I1HSvDK7Zl1eaQLxulj4oBnSDR0h1oRIvVuWvDX9aiOMGNObtKpxVme3KG9bGTVyjXNG8jWDVC uD1Cp56hIA== ) ;; ADDITIONAL SECTION (5 records) ns1e.census.gov. 3600 IN A 148.129.129.22 ns1e.census.gov. 3600 IN AAAA 2610:20:2000:101::16:0 ns2e.census.gov. 3600 IN A 148.129.75.22 ns2e.census.gov. 3600 IN AAAA 2610:20:2010:a04::16:0 ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for census.gov/DNSKEY
	Received 456 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 456 octets ;; HEADER SECTION ;; id = 8259 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) census.gov. 10800 IN NS ns1e.census.gov. census.gov. 10800 IN NS ns2e.census.gov. census.gov. 3600 IN DS ( 38584 8 2 aecf1415107033bff6c71a71b814538f553e9fe8edb6e4cb3e0a9d8ea83e8f91 ) census.gov. 3600 IN DS ( 54670 8 2 0db62e8dad5f492adf050d2b36ba29ca1daad9c49cacf4e12c293f939b151c3c ) census.gov. 3600 IN DS ( 63460 7 2 edbed9d0f2d04bccd6beb6310eb7327469a27c024e24778ac63422f69316bfc5 ) census.gov. 3600 IN DS ( 9606 7 2 f78ac01e59776fe73bd15b7de474cac666146a45ca41b19bc47c37695ee2e8b9 ) census.gov. 3600 IN RRSIG ( DS 13 2 3600 20260216081741 20260214061741 35496 gov. 3EbCLIzBERQTaj/+pFSuM3X2QorQX+EAlGYqSWSqcizN7BdGZWBFPq7QJEW0rSZh1DUIe+5MZrKJ eIzOkPzx4Q== ) ;; ADDITIONAL SECTION (5 records) ns1e.census.gov. 3600 IN A 148.129.129.22 ns1e.census.gov. 3600 IN AAAA 2610:20:2000:101::16:0 ns2e.census.gov. 3600 IN A 148.129.75.22 ns2e.census.gov. 3600 IN AAAA 2610:20:2010:a04::16:0 ;; { "EDNS-VERSION": 0 }
	Found child zone census.gov

census.gov

	Checking DS between gov and census.gov
	Query to d.ns.gov for census.gov/DS
	Received 330 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 330 octets ;; HEADER SECTION ;; id = 29996 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN DS ;; ANSWER SECTION (5 records) census.gov. 3600 IN DS ( 38584 8 2 aecf1415107033bff6c71a71b814538f553e9fe8edb6e4cb3e0a9d8ea83e8f91 ) census.gov. 3600 IN DS ( 54670 8 2 0db62e8dad5f492adf050d2b36ba29ca1daad9c49cacf4e12c293f939b151c3c ) census.gov. 3600 IN DS ( 63460 7 2 edbed9d0f2d04bccd6beb6310eb7327469a27c024e24778ac63422f69316bfc5 ) census.gov. 3600 IN DS ( 9606 7 2 f78ac01e59776fe73bd15b7de474cac666146a45ca41b19bc47c37695ee2e8b9 ) census.gov. 3600 IN RRSIG ( DS 13 2 3600 20260216081741 20260214061741 35496 gov. Wsf+4JiZDGh3TMnhAAexjQ6wROdzC9LMfxcIPElozw2UjT9CFL4xxMrM/HxjWYbW9J0+tMrOmK6Q q1hDuwX+SQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for census.gov in the gov zone
	DS=38584/SHA-256 has algorithm RSASHA256
	DS=54670/SHA-256 has algorithm RSASHA256
	DS=63460/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=9606/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`census.gov. 3600 IN RRSIG ( DS 13 2 3600 20260216081741 20260214061741 35496 gov. Wsf+4JiZDGh3TMnhAAexjQ6wROdzC9LMfxcIPElozw2UjT9CFL4xxMrM/HxjWYbW9J0+tMrOmK6Q q1hDuwX+SQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=38584/SHA-256 is now in the chain-of-trust
	DS=54670/SHA-256 is now in the chain-of-trust
	DS=63460/SHA-256 is now in the chain-of-trust
	DS=9606/SHA-256 is now in the chain-of-trust
	`census.gov. 3600 IN DS ( 38584 8 2 aecf1415107033bff6c71a71b814538f553e9fe8edb6e4cb3e0a9d8ea83e8f91 )`
	`census.gov. 3600 IN DS ( 54670 8 2 0db62e8dad5f492adf050d2b36ba29ca1daad9c49cacf4e12c293f939b151c3c )`
	`census.gov. 3600 IN DS ( 63460 7 2 edbed9d0f2d04bccd6beb6310eb7327469a27c024e24778ac63422f69316bfc5 )`
	`census.gov. 3600 IN DS ( 9606 7 2 f78ac01e59776fe73bd15b7de474cac666146a45ca41b19bc47c37695ee2e8b9 )`
	Query to ns2e.census.gov for census.gov/DNSKEY
	Received 3563 bytes from 148.129.75.22
	;; Response received from [148.129.75.22] 3563 octets ;; HEADER SECTION ;; id = 46237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 16 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN DNSKEY ;; ANSWER SECTION (16 records) census.gov. 302400 IN DNSKEY ( 256 3 7 AwEAAbytwIlDWSVBcRI5Igmk8/uMckvtr+jZwhTY1iM3064ppGQS78v/lYjRv7b8oo9Blohh8S08 Pq0EXn1O4zSyG2h3D/NhLQAisOCqHgYcbWW8TVt5uNmK9ayZXZqngYDc8Sbq1tN9iMmnZyld5Aq1 f0bSRrGTWzvLKzeEszj5YmJD ) ; keytag 38427 census.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAabIpKZS1sCS6nHoyx3eoPxn2VCwQsV4iQZMPi3OIP+xtV0KKkydbZZcinFl1V54v5KrldGy CH4UUMdFkNxlTXsWa74e4/KQrkR54bDYUj9ivj0CfyrAqBJKDuIP/kHxWobDow2gA8DBYPJHGsLp pfkt2qW6CqFOLW672V1/5nNT ) ; keytag 26190 census.gov. 302400 IN DNSKEY ( 256 3 7 AwEAAaPIjIiN+3HI1SciAtD7Xauv5H2Lvc1kdneoeF4vxJAfRzXjTGBguJm1fG2CzC8uncwYbFn+ H1eSNWdzLn9zRtn4Sdt517gXIfw3YJ2YJRK0YfhAEHJoxfs+1cXLT0bfWF2BZ8oeApkGStBLUcaz fLWSRFyTc9be3l6yga+ZNokZ ) ; keytag 11510 census.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAdSeHpPJfXc+H/oAgxECjmworC0XzcYMDjVfIdRqrS+5+WKtmHDjffXHYO479aGeILZm7VAH ad1ak9xqYegWgZnl0cBLOQfSII0q5/yQpKsuAv5F01r8V4p3o+sWEI8okxDkWpAuP7+M+umlPSKH AtwchXFuBty9xcg9g1y3+K0Kl1FcSE0hcktbLxbDSr8TEqBfbrnZ49Hfc9+xp42+T+xyESYvcMYY Ls3auwludpzq30XCMyVJnS8tju55WzX/iEMsoqZ8OIaydDg/bNMa3Z90BUG6Awc1qw0LdaDp4A5Z BN5+6CmuWWT5Bpq6P9lswcrdwguGg2TqGY+q7+THnzs= ) ; keytag 38584 census.gov. 302400 IN DNSKEY ( 257 3 7 AwEAAb3ogzspZrW4dlbkJnFRwxB0LQ3vph4x4KPBxzhMEtxjwcsCT+cSX0KBFMAhwhALxli4UxOK LkhjXEiMDX4zdp8f0NuQ57fTeTLXJZa32W+Lr4o+nzy2cQ1Le5BWzSAwcE3z1uzRNQqwT+SPNFMz WM72nYVO7sSNeQvvYDSGE7bZTQEfkOA/BUgh0MpmYocNUsgn9tLc7qx2a0wfVnJAuxDLA/G1pNYy 83cReGFMHbm6gGNTTrYnD7UlYrkIGdLvPCv5uft21ZHuPtBVZj+HPSaJQss2BaScbHhROh2rEQ3Y N1hIrCJvbKkccHC/aEd8zAj4GlNRmiYtAcODc74suU0= ) ; keytag 9606 census.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAcb1db8fGGc7y4uAeQp/jzx/974uI/viXo4AxqwQTYzNiXx3MhDuSFGjK7yuKNCgI+RnmUCX /xBxLYFdwJ+ihkBQOjb0Za5+GwLzDmKgY7zEdGf4iHnARfFGsjUNMet3Yn0hVltvWup3v2Q3oSuW WNQ4OKTEC7k8pvW4l+s8EmtL ) ; keytag 28249 census.gov. 302400 IN DNSKEY ( 256 3 7 AwEAAaDpqYoeJBbClBCK9S1RdV29/oi3TufO7gCGzOfCzp7iiy8ieN78b1Jg0AlCJXtG1AOJ6lXF 5YkExaYzSkxCSfUoVfMSRjYgRRl4WdrsoGEZYZX9VChiduq22a0QO/0Xgwk76nhVJ0Hsequb4iQ6 fG+KohZL9Hvi6clT2VSLi7Db ) ; keytag 3075 census.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAcWeS7zKzo+EPPEGkBhrT0YLL5/g7P8rkqwx6epLvMkLd1vZj0E+etDCMFCOs/M40heiMxuR fOWiwPrD+yoHiq0JTXl/ZEuVNLkDOJTfdYOYESBRbKGa/LVOaN+WhlEojndX+oU+7JLEcdw0ZMJe DqUyJEceGWvsNiK9pS0Bp66CW5rFnHUvOA3zMCVLUZrQNvy3oAPtFik2r46ZDgbPjROTaaJ3XiQo GctnHJoBq6eN0wzCnYKOZ8a89bx6SWE22+PejbFcNMokW0KhbOwf1aNGugHxS2ohqIvVDUNDhi6N 2lGekB05CfNb+q2QrrrmDDDPHbHxYMrVQc0oX4unKxk= ) ; keytag 54670 census.gov. 302400 IN DNSKEY ( 257 3 7 AwEAAapBQAhlwMfv/LuCwH79WkOYYat984cqvfjnrQk1FyJMyWav2u7NKgz6t9Dr3kFUEFJy2rOl AXE4NM7bAJmOTuJEul/ccCgUbIauVTedTyVcwEbM4QUKQosxjVMXqzMd8DYRf7xMA/bRdpZzpWvY uQPnSOXPu9p5nwxni463Jz6Yf44yobPCiM5xyeni7tZAuWzPUEiVgmt3IP4RocB8O+L3I12N/i2o NUNJPCYXt0zyMq8DHrwUrlvIBTUt1nsrE2qBHDseQU7/cFU32VRq1gK9SqHLFr4lqQsTCIvoo1xp 2sZTKszM2Cj5/eWEFFfzqscEAUmhRCvlOS8i3F1ZKW0= ) ; keytag 63460 census.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAcB/m+sYHYCqtm0ZCdlQtSQTAjlKUXrM0M7UWP+WmWfSyDkG4CSLIiAxFpETysjNcosH/PBA aTrqRf/ZK4lqVA3BjCL+GSaU5Q6Nv/O6CGk7uIesvQGp8zfm0+qQZuc//Koy7vRlQ8tOW4aPP7Vg RQHOjjJNS4WrwbOEOBLchbEx ) ; keytag 53815 census.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260221053553 20260214052844 9606 census.gov. l+sIK0e4dZPGwjy7kYq8YW/AiYWIa/kmA/NW7vyqiNTezvukDFqSVW2ty7IUzGK7LccscaFoEqye rwkgUr3JGODUGiFcv75SZMlNCEDRsafqQMIgQM1LalTewdIoqIq3z7olBCJoFdyLTHIhqQgvr0qU e/KvqV+RVtfrgEMFQp9dVRtIgTUjFi7vvxMHg+vv7JGqVHygcWFgGS98R4t1GtTw+NpEpBj6dlZf YIK9A9ghog04aqSJm1AMH4wPMwHm53ghmudF8lr7U/oybDGjZ34WyoS2mleuu8bFR+YqeIYRLBAl AywsWKNRQ+4TCiTD/Q1BO9j7VvtuDJnGXIdboA== ) census.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260221053553 20260214052844 38427 census.gov. hD3fBcxNkOXCrJyX7uIRBZrOIDbd8uTFFy4OvCnxizJjLpOBVB55Z48+IDUVLJtRSv5Dp7+0akXk OUoBPAG3zLikeIkAyVuNwUu5ZAtUY+arp72Wcpch0liMugkroHvJsmzcYUiI17pp4nT35EhuEU8B Wrr2jzcIiEYWl8sT4Y0= ) census.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260221053553 20260214052844 63460 census.gov. qG3cpwLP6kg5k0GX3vZLE6ZHE/G/AWvPc2ay9DJ7+8k3gFL0pZvs/K5QfhovUOGz8/KtTnt6dFdE FfVi6M3b5pXJM8rJ/698PJ5MkRw/yritBT3f28Rfltndlb7m3g3XWXCTz3YKrODxqyoqsizo85TT aN4YteIeGfXToSc6WQYCH52Iui5IRL31PIR4CvbKQ/wtMwJQcHWT2MZZekNa3lugHtZwQASJY4J+ QR0U21/kJ9Jla5K/G60QsGim21v5j77ZBtSCOq5bbNJiRcyoi2IhJP0FTAMh1yyc+lw+pI3Zyrya ypSV7ORnhOYiMAGYJsY8uEVzTRTv69UmVoVlDw== ) census.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260221053553 20260214052844 38584 census.gov. Mw4o++KLEGIfSPotcSOT1uYvQl6w/lCApL9VQd8C0IUccp8wpdIpFaPi1aE4sg1go6lNmri2l1kX 9wuWhDVzxI8M+cZgsEcE5+K1W76IdSgvyIb/CJab3XYXgPxByAek5KkNDudUmsrGULMEiGjVSbvr y4EJG7dAR0coOrhKxEL3EfoGONYEUai/+LUbIPvj5SWflos8kON/AAvJZc0bXrP0QMgPAGLj27a7 HpXLEZXgJdO1goBXawT+VB8WizoDBnS7JnIABpXsFL+9Hh6dr//yZk8PDrdk/VGFdPOmL3p58yAn RYJQuyG8ofDhLay5PPXC4+xmUakt75IihgF7jw== ) census.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260221053553 20260214052844 53815 census.gov. iBfDhOQRAB86eo+lRNEkwGfusO4l7Q1z/4rCOxVYP0qeCxBfcwnuPeQmV9LUbH4/zcsTbihyo9Ou 15N/ufy65G4MPid+vUS/+k/9jdRvZQJdfef9mDzVUQI8bwvTzMpsplpPKgyzIk7LwbkFm2bURxjs 5f+7fdiLx5YBibPAzN4= ) census.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260221053553 20260214052844 54670 census.gov. G+3jcsmBktWucuzb69ltkx8LJOlrjdeCFbqdT0qCxWGnOKziiNqkAwvsDSIVyqhPtgOItAO/9CuY 2x1VgALI+furj1W3D5eKSa3PgVnWqD9kOwyGAsiurOTVEZ3YdPkxs568BamBg+SHWxpwEbvaIg9U Jh+ZaS3NgoLmS8NTy5OIZ5x/hBdBzc2mDyI29p1NokR7kFwUATKvMVWZjfa5dtoPArTeuMmagHQL CKoOsRbGtp7mLrW7bMXiCsmhJk2r6dct1iXKwIc/vN6nwHqAahqtaZCF5FuIJfLHF+6BibsxgQ5k F7CCs0gH+cSCmbMlwv/qqYlpp49mBJKQnCCBJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 10 DNSKEY records for census.gov
	`census.gov. 302400 IN DNSKEY ( 256 3 7 AwEAAbytwIlDWSVBcRI5Igmk8/uMckvtr+jZwhTY1iM3064ppGQS78v/lYjRv7b8oo9Blohh8S08 Pq0EXn1O4zSyG2h3D/NhLQAisOCqHgYcbWW8TVt5uNmK9ayZXZqngYDc8Sbq1tN9iMmnZyld5Aq1 f0bSRrGTWzvLKzeEszj5YmJD ) ; keytag 38427`
	`census.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAabIpKZS1sCS6nHoyx3eoPxn2VCwQsV4iQZMPi3OIP+xtV0KKkydbZZcinFl1V54v5KrldGy CH4UUMdFkNxlTXsWa74e4/KQrkR54bDYUj9ivj0CfyrAqBJKDuIP/kHxWobDow2gA8DBYPJHGsLp pfkt2qW6CqFOLW672V1/5nNT ) ; keytag 26190`
	`census.gov. 302400 IN DNSKEY ( 256 3 7 AwEAAaPIjIiN+3HI1SciAtD7Xauv5H2Lvc1kdneoeF4vxJAfRzXjTGBguJm1fG2CzC8uncwYbFn+ H1eSNWdzLn9zRtn4Sdt517gXIfw3YJ2YJRK0YfhAEHJoxfs+1cXLT0bfWF2BZ8oeApkGStBLUcaz fLWSRFyTc9be3l6yga+ZNokZ ) ; keytag 11510`
	`census.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAdSeHpPJfXc+H/oAgxECjmworC0XzcYMDjVfIdRqrS+5+WKtmHDjffXHYO479aGeILZm7VAH ad1ak9xqYegWgZnl0cBLOQfSII0q5/yQpKsuAv5F01r8V4p3o+sWEI8okxDkWpAuP7+M+umlPSKH AtwchXFuBty9xcg9g1y3+K0Kl1FcSE0hcktbLxbDSr8TEqBfbrnZ49Hfc9+xp42+T+xyESYvcMYY Ls3auwludpzq30XCMyVJnS8tju55WzX/iEMsoqZ8OIaydDg/bNMa3Z90BUG6Awc1qw0LdaDp4A5Z BN5+6CmuWWT5Bpq6P9lswcrdwguGg2TqGY+q7+THnzs= ) ; keytag 38584`
	`census.gov. 302400 IN DNSKEY ( 257 3 7 AwEAAb3ogzspZrW4dlbkJnFRwxB0LQ3vph4x4KPBxzhMEtxjwcsCT+cSX0KBFMAhwhALxli4UxOK LkhjXEiMDX4zdp8f0NuQ57fTeTLXJZa32W+Lr4o+nzy2cQ1Le5BWzSAwcE3z1uzRNQqwT+SPNFMz WM72nYVO7sSNeQvvYDSGE7bZTQEfkOA/BUgh0MpmYocNUsgn9tLc7qx2a0wfVnJAuxDLA/G1pNYy 83cReGFMHbm6gGNTTrYnD7UlYrkIGdLvPCv5uft21ZHuPtBVZj+HPSaJQss2BaScbHhROh2rEQ3Y N1hIrCJvbKkccHC/aEd8zAj4GlNRmiYtAcODc74suU0= ) ; keytag 9606`
	`census.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAcb1db8fGGc7y4uAeQp/jzx/974uI/viXo4AxqwQTYzNiXx3MhDuSFGjK7yuKNCgI+RnmUCX /xBxLYFdwJ+ihkBQOjb0Za5+GwLzDmKgY7zEdGf4iHnARfFGsjUNMet3Yn0hVltvWup3v2Q3oSuW WNQ4OKTEC7k8pvW4l+s8EmtL ) ; keytag 28249`
	`census.gov. 302400 IN DNSKEY ( 256 3 7 AwEAAaDpqYoeJBbClBCK9S1RdV29/oi3TufO7gCGzOfCzp7iiy8ieN78b1Jg0AlCJXtG1AOJ6lXF 5YkExaYzSkxCSfUoVfMSRjYgRRl4WdrsoGEZYZX9VChiduq22a0QO/0Xgwk76nhVJ0Hsequb4iQ6 fG+KohZL9Hvi6clT2VSLi7Db ) ; keytag 3075`
	`census.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAcWeS7zKzo+EPPEGkBhrT0YLL5/g7P8rkqwx6epLvMkLd1vZj0E+etDCMFCOs/M40heiMxuR fOWiwPrD+yoHiq0JTXl/ZEuVNLkDOJTfdYOYESBRbKGa/LVOaN+WhlEojndX+oU+7JLEcdw0ZMJe DqUyJEceGWvsNiK9pS0Bp66CW5rFnHUvOA3zMCVLUZrQNvy3oAPtFik2r46ZDgbPjROTaaJ3XiQo GctnHJoBq6eN0wzCnYKOZ8a89bx6SWE22+PejbFcNMokW0KhbOwf1aNGugHxS2ohqIvVDUNDhi6N 2lGekB05CfNb+q2QrrrmDDDPHbHxYMrVQc0oX4unKxk= ) ; keytag 54670`
	`census.gov. 302400 IN DNSKEY ( 257 3 7 AwEAAapBQAhlwMfv/LuCwH79WkOYYat984cqvfjnrQk1FyJMyWav2u7NKgz6t9Dr3kFUEFJy2rOl AXE4NM7bAJmOTuJEul/ccCgUbIauVTedTyVcwEbM4QUKQosxjVMXqzMd8DYRf7xMA/bRdpZzpWvY uQPnSOXPu9p5nwxni463Jz6Yf44yobPCiM5xyeni7tZAuWzPUEiVgmt3IP4RocB8O+L3I12N/i2o NUNJPCYXt0zyMq8DHrwUrlvIBTUt1nsrE2qBHDseQU7/cFU32VRq1gK9SqHLFr4lqQsTCIvoo1xp 2sZTKszM2Cj5/eWEFFfzqscEAUmhRCvlOS8i3F1ZKW0= ) ; keytag 63460`
	`census.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAcB/m+sYHYCqtm0ZCdlQtSQTAjlKUXrM0M7UWP+WmWfSyDkG4CSLIiAxFpETysjNcosH/PBA aTrqRf/ZK4lqVA3BjCL+GSaU5Q6Nv/O6CGk7uIesvQGp8zfm0+qQZuc//Koy7vRlQ8tOW4aPP7Vg RQHOjjJNS4WrwbOEOBLchbEx ) ; keytag 53815`
	DNSKEY=38584/SEP is now in the chain-of-trust
	DS=38584/SHA-256 verifies DNSKEY=38584/SEP
	DNSKEY=9606/SEP is now in the chain-of-trust
	DS=9606/SHA-256 verifies DNSKEY=9606/SEP
	DNSKEY=54670/SEP is now in the chain-of-trust
	DS=54670/SHA-256 verifies DNSKEY=54670/SEP
	DNSKEY=63460/SEP is now in the chain-of-trust
	DS=63460/SHA-256 verifies DNSKEY=63460/SEP
	Found 6 RRSIGs over DNSKEY RRset
	`census.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260221053553 20260214052844 9606 census.gov. l+sIK0e4dZPGwjy7kYq8YW/AiYWIa/kmA/NW7vyqiNTezvukDFqSVW2ty7IUzGK7LccscaFoEqye rwkgUr3JGODUGiFcv75SZMlNCEDRsafqQMIgQM1LalTewdIoqIq3z7olBCJoFdyLTHIhqQgvr0qU e/KvqV+RVtfrgEMFQp9dVRtIgTUjFi7vvxMHg+vv7JGqVHygcWFgGS98R4t1GtTw+NpEpBj6dlZf YIK9A9ghog04aqSJm1AMH4wPMwHm53ghmudF8lr7U/oybDGjZ34WyoS2mleuu8bFR+YqeIYRLBAl AywsWKNRQ+4TCiTD/Q1BO9j7VvtuDJnGXIdboA== )`
	`census.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260221053553 20260214052844 38427 census.gov. hD3fBcxNkOXCrJyX7uIRBZrOIDbd8uTFFy4OvCnxizJjLpOBVB55Z48+IDUVLJtRSv5Dp7+0akXk OUoBPAG3zLikeIkAyVuNwUu5ZAtUY+arp72Wcpch0liMugkroHvJsmzcYUiI17pp4nT35EhuEU8B Wrr2jzcIiEYWl8sT4Y0= )`
	`census.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260221053553 20260214052844 63460 census.gov. qG3cpwLP6kg5k0GX3vZLE6ZHE/G/AWvPc2ay9DJ7+8k3gFL0pZvs/K5QfhovUOGz8/KtTnt6dFdE FfVi6M3b5pXJM8rJ/698PJ5MkRw/yritBT3f28Rfltndlb7m3g3XWXCTz3YKrODxqyoqsizo85TT aN4YteIeGfXToSc6WQYCH52Iui5IRL31PIR4CvbKQ/wtMwJQcHWT2MZZekNa3lugHtZwQASJY4J+ QR0U21/kJ9Jla5K/G60QsGim21v5j77ZBtSCOq5bbNJiRcyoi2IhJP0FTAMh1yyc+lw+pI3Zyrya ypSV7ORnhOYiMAGYJsY8uEVzTRTv69UmVoVlDw== )`
	`census.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260221053553 20260214052844 38584 census.gov. Mw4o++KLEGIfSPotcSOT1uYvQl6w/lCApL9VQd8C0IUccp8wpdIpFaPi1aE4sg1go6lNmri2l1kX 9wuWhDVzxI8M+cZgsEcE5+K1W76IdSgvyIb/CJab3XYXgPxByAek5KkNDudUmsrGULMEiGjVSbvr y4EJG7dAR0coOrhKxEL3EfoGONYEUai/+LUbIPvj5SWflos8kON/AAvJZc0bXrP0QMgPAGLj27a7 HpXLEZXgJdO1goBXawT+VB8WizoDBnS7JnIABpXsFL+9Hh6dr//yZk8PDrdk/VGFdPOmL3p58yAn RYJQuyG8ofDhLay5PPXC4+xmUakt75IihgF7jw== )`
	`census.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260221053553 20260214052844 53815 census.gov. iBfDhOQRAB86eo+lRNEkwGfusO4l7Q1z/4rCOxVYP0qeCxBfcwnuPeQmV9LUbH4/zcsTbihyo9Ou 15N/ufy65G4MPid+vUS/+k/9jdRvZQJdfef9mDzVUQI8bwvTzMpsplpPKgyzIk7LwbkFm2bURxjs 5f+7fdiLx5YBibPAzN4= )`
	`census.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260221053553 20260214052844 54670 census.gov. G+3jcsmBktWucuzb69ltkx8LJOlrjdeCFbqdT0qCxWGnOKziiNqkAwvsDSIVyqhPtgOItAO/9CuY 2x1VgALI+furj1W3D5eKSa3PgVnWqD9kOwyGAsiurOTVEZ3YdPkxs568BamBg+SHWxpwEbvaIg9U Jh+ZaS3NgoLmS8NTy5OIZ5x/hBdBzc2mDyI29p1NokR7kFwUATKvMVWZjfa5dtoPArTeuMmagHQL CKoOsRbGtp7mLrW7bMXiCsmhJk2r6dct1iXKwIc/vN6nwHqAahqtaZCF5FuIJfLHF+6BibsxgQ5k F7CCs0gH+cSCmbMlwv/qqYlpp49mBJKQnCCBJg== )`
	RRSIG=9606 and DNSKEY=9606/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=38427 and DNSKEY=38427 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=63460 and DNSKEY=63460/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=38584 and DNSKEY=38584/SEP verifies the DNSKEY RRset
	RRSIG=53815 and DNSKEY=53815 verifies the DNSKEY RRset
	RRSIG=54670 and DNSKEY=54670/SEP verifies the DNSKEY RRset
	DNSKEY=38427 is now in the chain-of-trust
	DNSKEY=26190 is now in the chain-of-trust
	DNSKEY=11510 is now in the chain-of-trust
	DNSKEY=28249 is now in the chain-of-trust
	DNSKEY=3075 is now in the chain-of-trust
	DNSKEY=53815 is now in the chain-of-trust
	Query to ns1e.census.gov for census.gov/A
	Received 395 bytes from 148.129.129.22
	;; Response received from [148.129.129.22] 395 octets ;; HEADER SECTION ;; id = 57303 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN A ;; ANSWER SECTION (3 records) census.gov. 300 IN A 148.129.75.166 census.gov. 300 IN RRSIG ( A 7 2 300 20260221050746 20260214045810 38427 census.gov. fDosPKookvU8Di8fKEBsJeCZBC/Feq+N3ZFDkE1fpevTHsMYAjUy/xcNMFu7no2WPAnLzV0FmwiX 0wq+CwoHn0RxNb6IiWWPUXOYDjQM0DNmqQ8DcuVOtYnOqgFqRoRyruGJavnWhPl2O04TH6OJBQH8 Z9kMdwbFhCRYqVjjMQA= ) census.gov. 300 IN RRSIG ( A 8 2 300 20260221050746 20260214045810 53815 census.gov. o6uE91rcjOEtf0eHjGKNWlKl7erlqf3LXiL0dtLyebPzuYnuf6eMCiOxTOXZWrNatpv+ah664gTu uno3DzmSqJyiX58JWosHSsTPtLLELucvlonvDAPGqkk1OiqOYaHokTJd57hDOrT3Xn4lFImlWNUK K/7u4FNheb72PQ/wync= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1e.census.gov is authoritative for census.gov
	Found RRSIG signed by census.gov zone
	Query to ns2e.census.gov for census.gov/SOA
	Received 425 bytes from 148.129.75.22
	;; Response received from [148.129.75.22] 425 octets ;; HEADER SECTION ;; id = 64356 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN SOA ;; ANSWER SECTION (3 records) census.gov. 900 IN SOA ( ns1e.census.gov. bind.census.gov. 2020170134 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) census.gov. 900 IN RRSIG ( SOA 7 2 900 20260222050400 20260215040400 38427 census.gov. tbQnySpAhCwaEXBx+279nSfPruoJqMDbKFjEWmF0Y1tWDTfPlu2vehwmFrJwVcW1HmeEIO/X8bbH fMcWT+0jtLyecsbz57SY22GxrWXPvqTXFOMoFLBzXZ6PDiLbMiZKi6N5GabFR72n5RQohf5kD1R1 PR/9e7Fvwy86dFDXXw0= ) census.gov. 900 IN RRSIG ( SOA 8 2 900 20260222050400 20260215040400 53815 census.gov. hUg4Lp0tKGqmNA21whYgZz35MqEChI8y4LDByuQbDm8GM83aADhVbVzACU8V/HbYadLejd1qBTG0 pf8wLneBRFaPfLMQpx/trQlNEqnr3Hk2WpidSVwVD0dA3RP/wbDjSst9b6bnm+FgCI1IL0RTd1a0 cRNuEdjmCjPqs1NmDbQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1e.census.gov for census.gov/A
	Received 395 bytes from 148.129.129.22
	;; Response received from [148.129.129.22] 395 octets ;; HEADER SECTION ;; id = 56269 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN A ;; ANSWER SECTION (3 records) census.gov. 300 IN A 148.129.75.166 census.gov. 300 IN RRSIG ( A 7 2 300 20260221050746 20260214045810 38427 census.gov. fDosPKookvU8Di8fKEBsJeCZBC/Feq+N3ZFDkE1fpevTHsMYAjUy/xcNMFu7no2WPAnLzV0FmwiX 0wq+CwoHn0RxNb6IiWWPUXOYDjQM0DNmqQ8DcuVOtYnOqgFqRoRyruGJavnWhPl2O04TH6OJBQH8 Z9kMdwbFhCRYqVjjMQA= ) census.gov. 300 IN RRSIG ( A 8 2 300 20260221050746 20260214045810 53815 census.gov. o6uE91rcjOEtf0eHjGKNWlKl7erlqf3LXiL0dtLyebPzuYnuf6eMCiOxTOXZWrNatpv+ah664gTu uno3DzmSqJyiX58JWosHSsTPtLLELucvlonvDAPGqkk1OiqOYaHokTJd57hDOrT3Xn4lFImlWNUK K/7u4FNheb72PQ/wync= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	census.gov A RR has value 148.129.75.166
	Found 2 RRSIGs over A RRset
	`census.gov. 300 IN RRSIG ( A 7 2 300 20260221050746 20260214045810 38427 census.gov. fDosPKookvU8Di8fKEBsJeCZBC/Feq+N3ZFDkE1fpevTHsMYAjUy/xcNMFu7no2WPAnLzV0FmwiX 0wq+CwoHn0RxNb6IiWWPUXOYDjQM0DNmqQ8DcuVOtYnOqgFqRoRyruGJavnWhPl2O04TH6OJBQH8 Z9kMdwbFhCRYqVjjMQA= )`
	`census.gov. 300 IN RRSIG ( A 8 2 300 20260221050746 20260214045810 53815 census.gov. o6uE91rcjOEtf0eHjGKNWlKl7erlqf3LXiL0dtLyebPzuYnuf6eMCiOxTOXZWrNatpv+ah664gTu uno3DzmSqJyiX58JWosHSsTPtLLELucvlonvDAPGqkk1OiqOYaHokTJd57hDOrT3Xn4lFImlWNUK K/7u4FNheb72PQ/wync= )`
	RRSIG=38427 and DNSKEY=38427 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=53815 and DNSKEY=53815 verifies the A RRset

census.gov

	Query to ns2e.census.gov for census.gov/A
	Received 395 bytes from 148.129.75.22
	;; Response received from [148.129.75.22] 395 octets ;; HEADER SECTION ;; id = 10844 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN A ;; ANSWER SECTION (3 records) census.gov. 300 IN A 148.129.75.166 census.gov. 300 IN RRSIG ( A 7 2 300 20260221050746 20260214045810 38427 census.gov. fDosPKookvU8Di8fKEBsJeCZBC/Feq+N3ZFDkE1fpevTHsMYAjUy/xcNMFu7no2WPAnLzV0FmwiX 0wq+CwoHn0RxNb6IiWWPUXOYDjQM0DNmqQ8DcuVOtYnOqgFqRoRyruGJavnWhPl2O04TH6OJBQH8 Z9kMdwbFhCRYqVjjMQA= ) census.gov. 300 IN RRSIG ( A 8 2 300 20260221050746 20260214045810 53815 census.gov. o6uE91rcjOEtf0eHjGKNWlKl7erlqf3LXiL0dtLyebPzuYnuf6eMCiOxTOXZWrNatpv+ah664gTu uno3DzmSqJyiX58JWosHSsTPtLLELucvlonvDAPGqkk1OiqOYaHokTJd57hDOrT3Xn4lFImlWNUK K/7u4FNheb72PQ/wync= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2e.census.gov is authoritative for census.gov
	Found RRSIG signed by census.gov zone
	Query to ns2e.census.gov for census.gov/A
	Received 395 bytes from 148.129.75.22
	;; Response received from [148.129.75.22] 395 octets ;; HEADER SECTION ;; id = 23730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; census.gov. IN A ;; ANSWER SECTION (3 records) census.gov. 300 IN A 148.129.75.166 census.gov. 300 IN RRSIG ( A 7 2 300 20260221050746 20260214045810 38427 census.gov. fDosPKookvU8Di8fKEBsJeCZBC/Feq+N3ZFDkE1fpevTHsMYAjUy/xcNMFu7no2WPAnLzV0FmwiX 0wq+CwoHn0RxNb6IiWWPUXOYDjQM0DNmqQ8DcuVOtYnOqgFqRoRyruGJavnWhPl2O04TH6OJBQH8 Z9kMdwbFhCRYqVjjMQA= ) census.gov. 300 IN RRSIG ( A 8 2 300 20260221050746 20260214045810 53815 census.gov. o6uE91rcjOEtf0eHjGKNWlKl7erlqf3LXiL0dtLyebPzuYnuf6eMCiOxTOXZWrNatpv+ah664gTu uno3DzmSqJyiX58JWosHSsTPtLLELucvlonvDAPGqkk1OiqOYaHokTJd57hDOrT3Xn4lFImlWNUK K/7u4FNheb72PQ/wync= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	census.gov A RR has value 148.129.75.166
	Found 2 RRSIGs over A RRset
	`census.gov. 300 IN RRSIG ( A 7 2 300 20260221050746 20260214045810 38427 census.gov. fDosPKookvU8Di8fKEBsJeCZBC/Feq+N3ZFDkE1fpevTHsMYAjUy/xcNMFu7no2WPAnLzV0FmwiX 0wq+CwoHn0RxNb6IiWWPUXOYDjQM0DNmqQ8DcuVOtYnOqgFqRoRyruGJavnWhPl2O04TH6OJBQH8 Z9kMdwbFhCRYqVjjMQA= )`
	`census.gov. 300 IN RRSIG ( A 8 2 300 20260221050746 20260214045810 53815 census.gov. o6uE91rcjOEtf0eHjGKNWlKl7erlqf3LXiL0dtLyebPzuYnuf6eMCiOxTOXZWrNatpv+ah664gTu uno3DzmSqJyiX58JWosHSsTPtLLELucvlonvDAPGqkk1OiqOYaHokTJd57hDOrT3Xn4lFImlWNUK K/7u4FNheb72PQ/wync= )`
	RRSIG=38427 and DNSKEY=38427 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=53815 and DNSKEY=53815 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test census.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: