DNSSEC Debugger - connect.gov

Domain Name:

Time: 2025-12-31 09:52:03 UTC

Analyzing DNSSEC problems for connect.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1414 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1414 octets ;; HEADER SECTION ;; id = 53770 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to b.root-servers.net for connect.gov/A
	Received 618 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 618 octets ;; HEADER SECTION ;; id = 55174 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260113050000 20251231040000 61809 . Yfgd84Cgg4NlRpQRXIzPubxs5nFRKibsWQp6yJ39zT2m9Dbgm3fuZCjEu3N7QsgnuQ99m+rBJn4k OLQx4C5PST1GP8+kw+TvmRFUKo4jW63oD8DVgf8+xDiLuQAqdNOjdet1Oo41EJ6inI2wbSLyImZW 9ZwrPhPNoCXZkJujaqFydsgt6YrjEXJOZ5HYJQDunACRqxSZ1yQrq3Hkm2I0Aq1P3CDZDs4AnX3h Uy7LIY8lN3eXpjtKnV4iRtJPHeYz8zxFuph8v+bP8v8fj744MBeXdM66oBPD60SJMKKyGYd0gPzV 1gvIQVLItWTzY0kDrIDp4PdqtTc6+pIU+9W3+w== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for gov/DNSKEY
	Received 610 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 610 octets ;; HEADER SECTION ;; id = 47162 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260113050000 20251231040000 61809 . Yfgd84Cgg4NlRpQRXIzPubxs5nFRKibsWQp6yJ39zT2m9Dbgm3fuZCjEu3N7QsgnuQ99m+rBJn4k OLQx4C5PST1GP8+kw+TvmRFUKo4jW63oD8DVgf8+xDiLuQAqdNOjdet1Oo41EJ6inI2wbSLyImZW 9ZwrPhPNoCXZkJujaqFydsgt6YrjEXJOZ5HYJQDunACRqxSZ1yQrq3Hkm2I0Aq1P3CDZDs4AnX3h Uy7LIY8lN3eXpjtKnV4iRtJPHeYz8zxFuph8v+bP8v8fj744MBeXdM66oBPD60SJMKKyGYd0gPzV 1gvIQVLItWTzY0kDrIDp4PdqtTc6+pIU+9W3+w== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 30629 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260113050000 20251231040000 61809 . Yfgd84Cgg4NlRpQRXIzPubxs5nFRKibsWQp6yJ39zT2m9Dbgm3fuZCjEu3N7QsgnuQ99m+rBJn4k OLQx4C5PST1GP8+kw+TvmRFUKo4jW63oD8DVgf8+xDiLuQAqdNOjdet1Oo41EJ6inI2wbSLyImZW 9ZwrPhPNoCXZkJujaqFydsgt6YrjEXJOZ5HYJQDunACRqxSZ1yQrq3Hkm2I0Aq1P3CDZDs4AnX3h Uy7LIY8lN3eXpjtKnV4iRtJPHeYz8zxFuph8v+bP8v8fj744MBeXdM66oBPD60SJMKKyGYd0gPzV 1gvIQVLItWTzY0kDrIDp4PdqtTc6+pIU+9W3+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260113050000 20251231040000 61809 . Yfgd84Cgg4NlRpQRXIzPubxs5nFRKibsWQp6yJ39zT2m9Dbgm3fuZCjEu3N7QsgnuQ99m+rBJn4k OLQx4C5PST1GP8+kw+TvmRFUKo4jW63oD8DVgf8+xDiLuQAqdNOjdet1Oo41EJ6inI2wbSLyImZW 9ZwrPhPNoCXZkJujaqFydsgt6YrjEXJOZ5HYJQDunACRqxSZ1yQrq3Hkm2I0Aq1P3CDZDs4AnX3h Uy7LIY8lN3eXpjtKnV4iRtJPHeYz8zxFuph8v+bP8v8fj744MBeXdM66oBPD60SJMKKyGYd0gPzV 1gvIQVLItWTzY0kDrIDp4PdqtTc6+pIU+9W3+w== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 47399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for connect.gov/A
	Received 255 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 255 octets ;; HEADER SECTION ;; id = 58352 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) connect.gov. 10800 IN NS ns2.nitc.usda.gov. connect.gov. 10800 IN NS ns3.han.nitc.usda.gov. connect.gov. 10800 IN NS ns4.han.nitc.usda.gov. connect.gov. 3600 IN DS ( 56102 13 2 680ee5d084b27738bcb60a6c91b5bf810405fa159bc00a2dcc9173a726842a22 ) connect.gov. 3600 IN RRSIG ( DS 13 2 3600 20260101105204 20251230085204 35496 gov. qBUMw2h3SI+GGgDqE9oxQwNUMYsXHIbJdQMSwxzv7GC0jPjXvjdWWwExyUQgzHHxUGC7FL47+eqC BWfAQW/zqw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for connect.gov/DNSKEY
	Received 255 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 255 octets ;; HEADER SECTION ;; id = 48157 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) connect.gov. 10800 IN NS ns2.nitc.usda.gov. connect.gov. 10800 IN NS ns3.han.nitc.usda.gov. connect.gov. 10800 IN NS ns4.han.nitc.usda.gov. connect.gov. 3600 IN DS ( 56102 13 2 680ee5d084b27738bcb60a6c91b5bf810405fa159bc00a2dcc9173a726842a22 ) connect.gov. 3600 IN RRSIG ( DS 13 2 3600 20260101105204 20251230085204 35496 gov. spvPy9a1aOv7WkVAepOrTfVobve3NHSNz6s7qrC2bZPtRmEysg/iqbI4AhHEmGhHpO+bTyfIMR64 ghVv+u8cpA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone connect.gov

connect.gov

	Checking DS between gov and connect.gov
	Query to c.ns.gov for connect.gov/DS
	Received 187 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 187 octets ;; HEADER SECTION ;; id = 14126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN DS ;; ANSWER SECTION (2 records) connect.gov. 3600 IN DS ( 56102 13 2 680ee5d084b27738bcb60a6c91b5bf810405fa159bc00a2dcc9173a726842a22 ) connect.gov. 3600 IN RRSIG ( DS 13 2 3600 20260101105204 20251230085204 35496 gov. Gn/iQxnDjRf1krsE6l3XuYdHaM3FNcmAmpRzInV8d3KbKCPGpUFjzoPfVnDy+nlPkjDS/x7HY/Pd yFTuM5HZdQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for connect.gov in the gov zone
	DS=56102/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`connect.gov. 3600 IN RRSIG ( DS 13 2 3600 20260101105204 20251230085204 35496 gov. Gn/iQxnDjRf1krsE6l3XuYdHaM3FNcmAmpRzInV8d3KbKCPGpUFjzoPfVnDy+nlPkjDS/x7HY/Pd yFTuM5HZdQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=56102/SHA-256 is now in the chain-of-trust
	`connect.gov. 3600 IN DS ( 56102 13 2 680ee5d084b27738bcb60a6c91b5bf810405fa159bc00a2dcc9173a726842a22 )`
	Query to ns4.han.nitc.usda.gov for connect.gov/DNSKEY
	Received 788 bytes from 199.134.208.90
	;; Response received from [199.134.208.90] 788 octets ;; HEADER SECTION ;; id = 63778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN DNSKEY ;; ANSWER SECTION (8 records) connect.gov. 86400 IN DNSKEY ( 256 3 13 Lb2shEtbkW8VEqx3rv25SKYEREi/cioFE3HxtRSWeeV0NlxQOz9DP/gDHUdsnLbLCqvM1D6646Ln l9xN4Lkouw== ) ; keytag 39745 connect.gov. 86400 IN DNSKEY ( 256 3 13 pDPNts15x2Q3X6Vb3rjL/uoYv4VW+Zyj86BFjzg4csBm1htG+BJq/EDoR4IRuMwh6uWgKLDYOX3z PEwFGej3oA== ) ; keytag 9549 connect.gov. 86400 IN DNSKEY ( 257 3 13 2JFwtdcc6hV+m8Ct/zj5BCMu2uOZfZHDfpOaVaffutmPYiPnurAmRHkB4q9TgeoIhgDt5t/x8jSu d6fQS3na1w== ) ; keytag 56102 connect.gov. 86400 IN DNSKEY ( 257 3 13 Y/0p/SHVkzwKZQNX+lf0UuucbxM4wtdEj3NY5AyZ+z/TxwF05cfEkN7SCyrfUkaTK+4G2brafCbO zcrq6EB7/A== ) ; keytag 38303 connect.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260104144649 20251230134649 9549 connect.gov. Se9jjacWDk6cu+6aTKOykF6I5+ss1JIcRU7odDPHkjK8mzHtEpGwxDdiPUhPOxozi0Wolgt/m+20 dCv3tiAT3Q== ) connect.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260104144649 20251230134649 38303 connect.gov. /TixoZ3FJaHraKL9UIZgzgXPv8zEHi0DfD5oAdU+y6EYsj6B0EPN8Zb1Ol4bYQw97k1VWtVYXJKY TJ1DNtMmeg== ) connect.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260104144649 20251230134649 39745 connect.gov. QnnhIVkoDSAyGsh8i+fze0a7k7NuPoosI2Os1zIzOfzJ7awyEhtER0wdqxa4ynN+pej8RR9Ri6fC WhoCvq1CEg== ) connect.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260104144649 20251230134649 56102 connect.gov. oL7zBmyQtBWk09MQVOhKUxElwkk9hjgi/9TJIt8f7Mxlmhpo0jJbRKM7PiR4cvMHmz2RBx53vbFx h5TCcH6/eg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for connect.gov
	`connect.gov. 86400 IN DNSKEY ( 256 3 13 Lb2shEtbkW8VEqx3rv25SKYEREi/cioFE3HxtRSWeeV0NlxQOz9DP/gDHUdsnLbLCqvM1D6646Ln l9xN4Lkouw== ) ; keytag 39745`
	`connect.gov. 86400 IN DNSKEY ( 256 3 13 pDPNts15x2Q3X6Vb3rjL/uoYv4VW+Zyj86BFjzg4csBm1htG+BJq/EDoR4IRuMwh6uWgKLDYOX3z PEwFGej3oA== ) ; keytag 9549`
	`connect.gov. 86400 IN DNSKEY ( 257 3 13 2JFwtdcc6hV+m8Ct/zj5BCMu2uOZfZHDfpOaVaffutmPYiPnurAmRHkB4q9TgeoIhgDt5t/x8jSu d6fQS3na1w== ) ; keytag 56102`
	`connect.gov. 86400 IN DNSKEY ( 257 3 13 Y/0p/SHVkzwKZQNX+lf0UuucbxM4wtdEj3NY5AyZ+z/TxwF05cfEkN7SCyrfUkaTK+4G2brafCbO zcrq6EB7/A== ) ; keytag 38303`
	DNSKEY=56102/SEP is now in the chain-of-trust
	DS=56102/SHA-256 verifies DNSKEY=56102/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`connect.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260104144649 20251230134649 9549 connect.gov. Se9jjacWDk6cu+6aTKOykF6I5+ss1JIcRU7odDPHkjK8mzHtEpGwxDdiPUhPOxozi0Wolgt/m+20 dCv3tiAT3Q== )`
	`connect.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260104144649 20251230134649 38303 connect.gov. /TixoZ3FJaHraKL9UIZgzgXPv8zEHi0DfD5oAdU+y6EYsj6B0EPN8Zb1Ol4bYQw97k1VWtVYXJKY TJ1DNtMmeg== )`
	`connect.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260104144649 20251230134649 39745 connect.gov. QnnhIVkoDSAyGsh8i+fze0a7k7NuPoosI2Os1zIzOfzJ7awyEhtER0wdqxa4ynN+pej8RR9Ri6fC WhoCvq1CEg== )`
	`connect.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260104144649 20251230134649 56102 connect.gov. oL7zBmyQtBWk09MQVOhKUxElwkk9hjgi/9TJIt8f7Mxlmhpo0jJbRKM7PiR4cvMHmz2RBx53vbFx h5TCcH6/eg== )`
	RRSIG=9549 and DNSKEY=9549 verifies the DNSKEY RRset
	RRSIG=38303 and DNSKEY=38303/SEP verifies the DNSKEY RRset
	RRSIG=39745 and DNSKEY=39745 verifies the DNSKEY RRset
	RRSIG=56102 and DNSKEY=56102/SEP verifies the DNSKEY RRset
	DNSKEY=39745 is now in the chain-of-trust
	DNSKEY=9549 is now in the chain-of-trust
	DNSKEY=38303/SEP is now in the chain-of-trust
	Query to ns3.han.nitc.usda.gov for connect.gov/A
	Received 270 bytes from 199.134.208.70
	;; Response received from [199.134.208.70] 270 octets ;; HEADER SECTION ;; id = 41166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN A ;; ANSWER SECTION (3 records) connect.gov. 14400 IN A 162.79.29.12 connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 9549 connect.gov. GJIXqC+RbtzlQJIOf94IEAObOi5kUBk8mAMJX65madrzaD7buDPCmzOeCh0waPUwE3wvl43r4Nyu oCyrUoOo+Q== ) connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 39745 connect.gov. cgYxisQJv6KWdxxXa+/tXAs6/UX/OzewKDEOo/kzb4T5ehd8ElwHm5WKLrez+dvga14GlLKeSNNC 0trWicV/5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.han.nitc.usda.gov is authoritative for connect.gov
	Found RRSIG signed by connect.gov zone
	Query to ns2.nitc.usda.gov for connect.gov/SOA
	Received 341 bytes from 199.134.227.132
	;; Response received from [199.134.227.132] 341 octets ;; HEADER SECTION ;; id = 46636 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN SOA ;; ANSWER SECTION (3 records) connect.gov. 14400 IN SOA ( ns1.han.nitc.usda.gov. network\.services.ocio.usda.gov. 19532 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) connect.gov. 14400 IN RRSIG ( SOA 13 2 14400 20260105063521 20251231053521 9549 connect.gov. xFNjYR8WW3pAStFLYN+eqqUjm0CirQvKEMCOF6AnLOXQalqzEL+TqD5LbWM7YvLY5h8ZUuH1+lJb MOyy4q08qw== ) connect.gov. 14400 IN RRSIG ( SOA 13 2 14400 20260105063521 20251231053521 39745 connect.gov. 2q76AVI4n5Lp8xK9ugF4FuZHeZXLr+HNkzdm8DUEIO/odrgqnwCEqPTnggpD999bfpTK2bbTxCAL 24N3E2kZGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.han.nitc.usda.gov for connect.gov/SOA
	Received 341 bytes from 199.134.208.90
	;; Response received from [199.134.208.90] 341 octets ;; HEADER SECTION ;; id = 50729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN SOA ;; ANSWER SECTION (3 records) connect.gov. 14400 IN SOA ( ns1.han.nitc.usda.gov. network\.services.ocio.usda.gov. 19532 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) connect.gov. 14400 IN RRSIG ( SOA 13 2 14400 20260105063521 20251231053521 9549 connect.gov. xFNjYR8WW3pAStFLYN+eqqUjm0CirQvKEMCOF6AnLOXQalqzEL+TqD5LbWM7YvLY5h8ZUuH1+lJb MOyy4q08qw== ) connect.gov. 14400 IN RRSIG ( SOA 13 2 14400 20260105063521 20251231053521 39745 connect.gov. 2q76AVI4n5Lp8xK9ugF4FuZHeZXLr+HNkzdm8DUEIO/odrgqnwCEqPTnggpD999bfpTK2bbTxCAL 24N3E2kZGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.han.nitc.usda.gov for connect.gov/A
	Received 270 bytes from 199.134.208.70
	;; Response received from [199.134.208.70] 270 octets ;; HEADER SECTION ;; id = 60725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN A ;; ANSWER SECTION (3 records) connect.gov. 14400 IN A 162.79.29.12 connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 9549 connect.gov. GJIXqC+RbtzlQJIOf94IEAObOi5kUBk8mAMJX65madrzaD7buDPCmzOeCh0waPUwE3wvl43r4Nyu oCyrUoOo+Q== ) connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 39745 connect.gov. cgYxisQJv6KWdxxXa+/tXAs6/UX/OzewKDEOo/kzb4T5ehd8ElwHm5WKLrez+dvga14GlLKeSNNC 0trWicV/5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	connect.gov A RR has value 162.79.29.12
	Found 2 RRSIGs over A RRset
	`connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 9549 connect.gov. GJIXqC+RbtzlQJIOf94IEAObOi5kUBk8mAMJX65madrzaD7buDPCmzOeCh0waPUwE3wvl43r4Nyu oCyrUoOo+Q== )`
	`connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 39745 connect.gov. cgYxisQJv6KWdxxXa+/tXAs6/UX/OzewKDEOo/kzb4T5ehd8ElwHm5WKLrez+dvga14GlLKeSNNC 0trWicV/5w== )`
	RRSIG=9549 and DNSKEY=9549 verifies the A RRset
	RRSIG=39745 and DNSKEY=39745 verifies the A RRset

connect.gov

	Query to ns2.nitc.usda.gov for connect.gov/A
	Received 270 bytes from 199.134.227.132
	;; Response received from [199.134.227.132] 270 octets ;; HEADER SECTION ;; id = 40595 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN A ;; ANSWER SECTION (3 records) connect.gov. 14400 IN A 162.79.29.12 connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 9549 connect.gov. GJIXqC+RbtzlQJIOf94IEAObOi5kUBk8mAMJX65madrzaD7buDPCmzOeCh0waPUwE3wvl43r4Nyu oCyrUoOo+Q== ) connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 39745 connect.gov. cgYxisQJv6KWdxxXa+/tXAs6/UX/OzewKDEOo/kzb4T5ehd8ElwHm5WKLrez+dvga14GlLKeSNNC 0trWicV/5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.nitc.usda.gov is authoritative for connect.gov
	Found RRSIG signed by connect.gov zone
	Query to ns2.nitc.usda.gov for connect.gov/A
	Received 270 bytes from 199.134.227.132
	;; Response received from [199.134.227.132] 270 octets ;; HEADER SECTION ;; id = 6603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN A ;; ANSWER SECTION (3 records) connect.gov. 14400 IN A 162.79.29.12 connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 9549 connect.gov. GJIXqC+RbtzlQJIOf94IEAObOi5kUBk8mAMJX65madrzaD7buDPCmzOeCh0waPUwE3wvl43r4Nyu oCyrUoOo+Q== ) connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 39745 connect.gov. cgYxisQJv6KWdxxXa+/tXAs6/UX/OzewKDEOo/kzb4T5ehd8ElwHm5WKLrez+dvga14GlLKeSNNC 0trWicV/5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	connect.gov A RR has value 162.79.29.12
	Found 2 RRSIGs over A RRset
	`connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 9549 connect.gov. GJIXqC+RbtzlQJIOf94IEAObOi5kUBk8mAMJX65madrzaD7buDPCmzOeCh0waPUwE3wvl43r4Nyu oCyrUoOo+Q== )`
	`connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 39745 connect.gov. cgYxisQJv6KWdxxXa+/tXAs6/UX/OzewKDEOo/kzb4T5ehd8ElwHm5WKLrez+dvga14GlLKeSNNC 0trWicV/5w== )`
	RRSIG=9549 and DNSKEY=9549 verifies the A RRset
	RRSIG=39745 and DNSKEY=39745 verifies the A RRset

connect.gov

	Query to ns4.han.nitc.usda.gov for connect.gov/A
	Received 270 bytes from 199.134.208.90
	;; Response received from [199.134.208.90] 270 octets ;; HEADER SECTION ;; id = 33354 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN A ;; ANSWER SECTION (3 records) connect.gov. 14400 IN A 162.79.29.12 connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 9549 connect.gov. GJIXqC+RbtzlQJIOf94IEAObOi5kUBk8mAMJX65madrzaD7buDPCmzOeCh0waPUwE3wvl43r4Nyu oCyrUoOo+Q== ) connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 39745 connect.gov. cgYxisQJv6KWdxxXa+/tXAs6/UX/OzewKDEOo/kzb4T5ehd8ElwHm5WKLrez+dvga14GlLKeSNNC 0trWicV/5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.han.nitc.usda.gov is authoritative for connect.gov
	Found RRSIG signed by connect.gov zone
	Query to ns4.han.nitc.usda.gov for connect.gov/A
	Received 270 bytes from 199.134.208.90
	;; Response received from [199.134.208.90] 270 octets ;; HEADER SECTION ;; id = 55963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; connect.gov. IN A ;; ANSWER SECTION (3 records) connect.gov. 14400 IN A 162.79.29.12 connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 9549 connect.gov. GJIXqC+RbtzlQJIOf94IEAObOi5kUBk8mAMJX65madrzaD7buDPCmzOeCh0waPUwE3wvl43r4Nyu oCyrUoOo+Q== ) connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 39745 connect.gov. cgYxisQJv6KWdxxXa+/tXAs6/UX/OzewKDEOo/kzb4T5ehd8ElwHm5WKLrez+dvga14GlLKeSNNC 0trWicV/5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	connect.gov A RR has value 162.79.29.12
	Found 2 RRSIGs over A RRset
	`connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 9549 connect.gov. GJIXqC+RbtzlQJIOf94IEAObOi5kUBk8mAMJX65madrzaD7buDPCmzOeCh0waPUwE3wvl43r4Nyu oCyrUoOo+Q== )`
	`connect.gov. 14400 IN RRSIG ( A 13 2 14400 20260105034618 20251231031057 39745 connect.gov. cgYxisQJv6KWdxxXa+/tXAs6/UX/OzewKDEOo/kzb4T5ehd8ElwHm5WKLrez+dvga14GlLKeSNNC 0trWicV/5w== )`
	RRSIG=9549 and DNSKEY=9549 verifies the A RRset
	RRSIG=39745 and DNSKEY=39745 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test connect.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: