DNSSEC Debugger - denali.gov

Domain Name:

Time: 2025-11-10 00:47:06 UTC

Analyzing DNSSEC problems for denali.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 54627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for denali.gov/A
	Received 620 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 620 octets ;; HEADER SECTION ;; id = 28409 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . UKAuerckTehHMGg2WTEy+U5TuWQ3+Nmw+vXaNuZc/koIXGdzyw38o5dRb7D1NOtHJkGPC4Q6k5sC 6chQ8r8mCrc+FhlE8o0VO3Ah7zFRLQhvoTXrCY7clheaZ99PLfO8BZkHtJcEue7DSwfUWjetW8fh jCFbejZefOXdlAoe6xhCekgxrAvOpkUPwHAyi1DSp2M5vG7x4q6SH5E7kF0P0YETCroPY8IdHfJs IceMDtiJSfdpY0aWj7Qk4+2VEjsm3Dxsu+J29zD+IhJPjenjTPdES6RH96WbXvvfBx+/xCt/Sm1p X0xoSIPv0wSfnoA/2Bn4/hnzPBLG6YAOAa9F+A== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 613 octets ;; HEADER SECTION ;; id = 34024 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . UKAuerckTehHMGg2WTEy+U5TuWQ3+Nmw+vXaNuZc/koIXGdzyw38o5dRb7D1NOtHJkGPC4Q6k5sC 6chQ8r8mCrc+FhlE8o0VO3Ah7zFRLQhvoTXrCY7clheaZ99PLfO8BZkHtJcEue7DSwfUWjetW8fh jCFbejZefOXdlAoe6xhCekgxrAvOpkUPwHAyi1DSp2M5vG7x4q6SH5E7kF0P0YETCroPY8IdHfJs IceMDtiJSfdpY0aWj7Qk4+2VEjsm3Dxsu+J29zD+IhJPjenjTPdES6RH96WbXvvfBx+/xCt/Sm1p X0xoSIPv0wSfnoA/2Bn4/hnzPBLG6YAOAa9F+A== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to l.root-servers.net for gov/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 5133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . UKAuerckTehHMGg2WTEy+U5TuWQ3+Nmw+vXaNuZc/koIXGdzyw38o5dRb7D1NOtHJkGPC4Q6k5sC 6chQ8r8mCrc+FhlE8o0VO3Ah7zFRLQhvoTXrCY7clheaZ99PLfO8BZkHtJcEue7DSwfUWjetW8fh jCFbejZefOXdlAoe6xhCekgxrAvOpkUPwHAyi1DSp2M5vG7x4q6SH5E7kF0P0YETCroPY8IdHfJs IceMDtiJSfdpY0aWj7Qk4+2VEjsm3Dxsu+J29zD+IhJPjenjTPdES6RH96WbXvvfBx+/xCt/Sm1p X0xoSIPv0wSfnoA/2Bn4/hnzPBLG6YAOAa9F+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . UKAuerckTehHMGg2WTEy+U5TuWQ3+Nmw+vXaNuZc/koIXGdzyw38o5dRb7D1NOtHJkGPC4Q6k5sC 6chQ8r8mCrc+FhlE8o0VO3Ah7zFRLQhvoTXrCY7clheaZ99PLfO8BZkHtJcEue7DSwfUWjetW8fh jCFbejZefOXdlAoe6xhCekgxrAvOpkUPwHAyi1DSp2M5vG7x4q6SH5E7kF0P0YETCroPY8IdHfJs IceMDtiJSfdpY0aWj7Qk4+2VEjsm3Dxsu+J29zD+IhJPjenjTPdES6RH96WbXvvfBx+/xCt/Sm1p X0xoSIPv0wSfnoA/2Bn4/hnzPBLG6YAOAa9F+A== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 51747 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251219110613 20251019110613 2536 gov. j3FRDkQ+/qhx8n7XWgDk7DC6YuMd0K42x1BaoJP4SEm+WtzI5LbaxO7OS3rDz3G0nG4HtRwBe8wW 1w4LNc5mNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251219110613 20251019110613 2536 gov. j3FRDkQ+/qhx8n7XWgDk7DC6YuMd0K42x1BaoJP4SEm+WtzI5LbaxO7OS3rDz3G0nG4HtRwBe8wW 1w4LNc5mNA== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for denali.gov/A
	Received 271 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 271 octets ;; HEADER SECTION ;; id = 30636 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) denali.gov. 10800 IN NS ns1.acsalaska.net. denali.gov. 10800 IN NS ns2.acsalaska.net. denali.gov. 10800 IN NS ns3.acsalaska.net. denali.gov. 10800 IN NS ns4.acsalaska.net. denali.gov. 3600 IN DS ( 64389 7 2 75f160cf076c65d38b92ce8072f5e74fbc08894a1ad2987f81c3f8947fdf032f ) denali.gov. 3600 IN RRSIG ( DS 13 2 3600 20251111014706 20251108234706 35496 gov. m9c7LH7dVjPQBclXRw9zYEaiJJYKBhWOSYYdt3JWxNLYxDG12JkLcEs+LaUAWLtc2uIvIMeZ4p85 6xVB+oqw/g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for denali.gov/DNSKEY
	Received 271 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 271 octets ;; HEADER SECTION ;; id = 40101 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) denali.gov. 10800 IN NS ns1.acsalaska.net. denali.gov. 10800 IN NS ns2.acsalaska.net. denali.gov. 10800 IN NS ns3.acsalaska.net. denali.gov. 10800 IN NS ns4.acsalaska.net. denali.gov. 3600 IN DS ( 64389 7 2 75f160cf076c65d38b92ce8072f5e74fbc08894a1ad2987f81c3f8947fdf032f ) denali.gov. 3600 IN RRSIG ( DS 13 2 3600 20251111014706 20251108234706 35496 gov. 7gUMnQgxYe4c0d5tyZfR6cZcK25o9pT4mXUxz1Q32+j6UG037mh/8KVr6Ms2GFvmKonDxaFJI4WO HKueHRTyqQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone denali.gov

denali.gov

	Checking DS between gov and denali.gov
	Query to d.ns.gov for denali.gov/DS
	Received 186 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 186 octets ;; HEADER SECTION ;; id = 52703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN DS ;; ANSWER SECTION (2 records) denali.gov. 3600 IN DS ( 64389 7 2 75f160cf076c65d38b92ce8072f5e74fbc08894a1ad2987f81c3f8947fdf032f ) denali.gov. 3600 IN RRSIG ( DS 13 2 3600 20251111014706 20251108234706 35496 gov. bghxYqPS7a6zZknCksR/loSWEP7SbUJjmJXW6j+3+a624gWmJvsuYrfwLTJsqxODoaDbe9v0skGq NNJsLPCuzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for denali.gov in the gov zone
	DS=64389/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`denali.gov. 3600 IN RRSIG ( DS 13 2 3600 20251111014706 20251108234706 35496 gov. bghxYqPS7a6zZknCksR/loSWEP7SbUJjmJXW6j+3+a624gWmJvsuYrfwLTJsqxODoaDbe9v0skGq NNJsLPCuzw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=64389/SHA-256 is now in the chain-of-trust
	`denali.gov. 3600 IN DS ( 64389 7 2 75f160cf076c65d38b92ce8072f5e74fbc08894a1ad2987f81c3f8947fdf032f )`
	Query to ns3.acsalaska.net for denali.gov/DNSKEY
	Received 889 bytes from 216.67.0.1
	;; Response received from [216.67.0.1] 889 octets ;; HEADER SECTION ;; id = 31543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN DNSKEY ;; ANSWER SECTION (3 records) denali.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAamLf6fAybujMyloc/pfp1SmVHEM0qySrJdqpMPArM/eJFKrlSpS2pE3Yc1wq8bqXyl4/QR3 R4R7pfCf3R0f6dq9UA55gUfP/WZpvkjWDcDNZt1xxzuq1+PaPlVniJU33k6+qdbVE1uiZCyAKdfX p75Nf4E+bvFhbZlIlYImQbexncxZ9hkWsqMHZpoDo2+1aCUreohi4YwO1KdUufKu/+Xgx4geY/Y5 vVuv6YeJWGG1Sb59b6MQpCr6uYgSeIfZWVJw0cKvS1RZb5EqQT23wm1RLIguGcCEgYb/lGX/66kr RMQQuJM1d++EVyZAU+oF3DktjhYbLI+G5fJBSvRaL4M= ) ; keytag 41600 denali.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAa1Z3ULc60BlElRxF2rIQgd1gwLxqbtqjUXWzFAD2dle6R115uzsyA7Br1y0joqS/m9Or2t2 wpYRX+vVcvf+jPlGFcSU4kW0IsL4lfkJL1VtwekQkZSwjkn2aHpkOgUJv3M+6/VcN1HuZPBeJPcZ 4dBUkuLofBdhdP1tKlpXoqv3Lf7+h+CXtRiUVhen2V2fSLUVddLqoOEX/h7PHEv1iSCNbFJKcVZg iWpOZI6Pdxb3ACS17SudZOEr917iz+nzDnvlLPED4wpJ7nrPoRYr0iKYYpA3nAiq9jsgVGd1WUyz nTBwZrGRt3lS4JsmcZzXTORAmsv4h1vspe2n2y0OJGE= ) ; keytag 64389 denali.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20251122235625 20251108231239 64389 denali.gov. lM/JUGQaHHa/VrNzdWNV504+gR/18F6+g6Eo5V9IZZOt4xDp2C7co2Sz/ReAuYoEpQkWpf1GG1Vz 6x/m+ddrF8bopdd6APB7sdHFyLeodPUueIIFw7UsK8laZPMpKPy6CB4A5CN9v35mloDYLFeyGWMP AvDfygtNWfgCb3bD+TPyZa9SKylfR6yW+2/InseUX6lnFnlRBQdbAq+4Xwu7i8zltKXO8aZb7x/B afbfyuFCZr0BMxWRq/NInCbpgc9BkFEhruH20LN9S09ZJ1lyc5vuG8f0GEwTwBp9wFUIkdDkrDoq sTscX+PglFA93GnheW7+ZIEMe2CZ8NtCw1xdlw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for denali.gov
	`denali.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAamLf6fAybujMyloc/pfp1SmVHEM0qySrJdqpMPArM/eJFKrlSpS2pE3Yc1wq8bqXyl4/QR3 R4R7pfCf3R0f6dq9UA55gUfP/WZpvkjWDcDNZt1xxzuq1+PaPlVniJU33k6+qdbVE1uiZCyAKdfX p75Nf4E+bvFhbZlIlYImQbexncxZ9hkWsqMHZpoDo2+1aCUreohi4YwO1KdUufKu/+Xgx4geY/Y5 vVuv6YeJWGG1Sb59b6MQpCr6uYgSeIfZWVJw0cKvS1RZb5EqQT23wm1RLIguGcCEgYb/lGX/66kr RMQQuJM1d++EVyZAU+oF3DktjhYbLI+G5fJBSvRaL4M= ) ; keytag 41600`
	`denali.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAa1Z3ULc60BlElRxF2rIQgd1gwLxqbtqjUXWzFAD2dle6R115uzsyA7Br1y0joqS/m9Or2t2 wpYRX+vVcvf+jPlGFcSU4kW0IsL4lfkJL1VtwekQkZSwjkn2aHpkOgUJv3M+6/VcN1HuZPBeJPcZ 4dBUkuLofBdhdP1tKlpXoqv3Lf7+h+CXtRiUVhen2V2fSLUVddLqoOEX/h7PHEv1iSCNbFJKcVZg iWpOZI6Pdxb3ACS17SudZOEr917iz+nzDnvlLPED4wpJ7nrPoRYr0iKYYpA3nAiq9jsgVGd1WUyz nTBwZrGRt3lS4JsmcZzXTORAmsv4h1vspe2n2y0OJGE= ) ; keytag 64389`
	DNSKEY=64389/SEP is now in the chain-of-trust
	DS=64389/SHA-256 verifies DNSKEY=64389/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`denali.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20251122235625 20251108231239 64389 denali.gov. lM/JUGQaHHa/VrNzdWNV504+gR/18F6+g6Eo5V9IZZOt4xDp2C7co2Sz/ReAuYoEpQkWpf1GG1Vz 6x/m+ddrF8bopdd6APB7sdHFyLeodPUueIIFw7UsK8laZPMpKPy6CB4A5CN9v35mloDYLFeyGWMP AvDfygtNWfgCb3bD+TPyZa9SKylfR6yW+2/InseUX6lnFnlRBQdbAq+4Xwu7i8zltKXO8aZb7x/B afbfyuFCZr0BMxWRq/NInCbpgc9BkFEhruH20LN9S09ZJ1lyc5vuG8f0GEwTwBp9wFUIkdDkrDoq sTscX+PglFA93GnheW7+ZIEMe2CZ8NtCw1xdlw== )`
	RRSIG=64389 and DNSKEY=64389/SEP verifies the DNSKEY RRset
	DNSKEY=41600 is now in the chain-of-trust
	Query to ns4.acsalaska.net for denali.gov/A
	Received 736 bytes from 209.193.0.1
	;; Response received from [209.193.0.1] 736 octets ;; HEADER SECTION ;; id = 51562 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (2 records) denali.gov. 86400 IN A 198.71.233.237 denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.acsalaska.net is authoritative for denali.gov
	Found RRSIG signed by denali.gov zone
	Query to ns2.acsalaska.net for denali.gov/SOA
	Received 796 bytes from 209.112.128.1
	;; Response received from [209.112.128.1] 796 octets ;; HEADER SECTION ;; id = 12355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN SOA ;; ANSWER SECTION (2 records) denali.gov. 86400 IN SOA ( dnsmaster.prv.nwc.acsalaska.net. dnsadmin.acsalaska.net. 2024081365 ;serial 3600 ;refresh 900 ;retry 2419200 ;expire 86400 ;minimum ) denali.gov. 86400 IN RRSIG ( SOA 7 2 86400 20251123001239 20251108231239 41600 denali.gov. o6Yf63VCOA881ptYntltXKbtjSiGCuLdFG2JVySQCoxPkxXSsv2dqs6xwg+JC6FAEUIWmrnCtkY9 qqfn0CbZFnDidvKlKvnaggfP4ySHTTYR8QaX32ktfHx/YLsl9yzRGCkNCaeqMeIS6M+3WCTv4ADt UmnyVvo5HjGuiEnDEctZDFiWD9fqQnfIrZBdA2/oLwkW4uzsgn48kr2hkiqmEpMm3rT+SnnTUSSi HXy0khPg/Hf7r/ocG6OmnpPqQFeyWgn+DxQBBpWtm8WiqSFdaHfoQxCxGBTdZu0g/Gfe2bm4u8bN F56Rcb1nNb8LJFw0O2fQEHrVKPSEHZ8posC39A== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.acsalaska.net for denali.gov/SOA
	Received 796 bytes from 204.17.139.1
	;; Response received from [204.17.139.1] 796 octets ;; HEADER SECTION ;; id = 48643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN SOA ;; ANSWER SECTION (2 records) denali.gov. 86400 IN SOA ( dnsmaster.prv.nwc.acsalaska.net. dnsadmin.acsalaska.net. 2024081365 ;serial 3600 ;refresh 900 ;retry 2419200 ;expire 86400 ;minimum ) denali.gov. 86400 IN RRSIG ( SOA 7 2 86400 20251123001239 20251108231239 41600 denali.gov. o6Yf63VCOA881ptYntltXKbtjSiGCuLdFG2JVySQCoxPkxXSsv2dqs6xwg+JC6FAEUIWmrnCtkY9 qqfn0CbZFnDidvKlKvnaggfP4ySHTTYR8QaX32ktfHx/YLsl9yzRGCkNCaeqMeIS6M+3WCTv4ADt UmnyVvo5HjGuiEnDEctZDFiWD9fqQnfIrZBdA2/oLwkW4uzsgn48kr2hkiqmEpMm3rT+SnnTUSSi HXy0khPg/Hf7r/ocG6OmnpPqQFeyWgn+DxQBBpWtm8WiqSFdaHfoQxCxGBTdZu0g/Gfe2bm4u8bN F56Rcb1nNb8LJFw0O2fQEHrVKPSEHZ8posC39A== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.acsalaska.net for denali.gov/SOA
	Received 796 bytes from 216.67.0.1
	;; Response received from [216.67.0.1] 796 octets ;; HEADER SECTION ;; id = 11450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN SOA ;; ANSWER SECTION (2 records) denali.gov. 86400 IN SOA ( dnsmaster.prv.nwc.acsalaska.net. dnsadmin.acsalaska.net. 2024081365 ;serial 3600 ;refresh 900 ;retry 2419200 ;expire 86400 ;minimum ) denali.gov. 86400 IN RRSIG ( SOA 7 2 86400 20251123001239 20251108231239 41600 denali.gov. o6Yf63VCOA881ptYntltXKbtjSiGCuLdFG2JVySQCoxPkxXSsv2dqs6xwg+JC6FAEUIWmrnCtkY9 qqfn0CbZFnDidvKlKvnaggfP4ySHTTYR8QaX32ktfHx/YLsl9yzRGCkNCaeqMeIS6M+3WCTv4ADt UmnyVvo5HjGuiEnDEctZDFiWD9fqQnfIrZBdA2/oLwkW4uzsgn48kr2hkiqmEpMm3rT+SnnTUSSi HXy0khPg/Hf7r/ocG6OmnpPqQFeyWgn+DxQBBpWtm8WiqSFdaHfoQxCxGBTdZu0g/Gfe2bm4u8bN F56Rcb1nNb8LJFw0O2fQEHrVKPSEHZ8posC39A== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.acsalaska.net for denali.gov/A
	Received 736 bytes from 209.193.0.1
	;; Response received from [209.193.0.1] 736 octets ;; HEADER SECTION ;; id = 5892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (2 records) denali.gov. 86400 IN A 198.71.233.237 denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	denali.gov A RR has value 198.71.233.237
	Found 1 RRSIGs over A RRset
	`denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== )`
	RRSIG=41600 and DNSKEY=41600 verifies the A RRset

denali.gov

	Query to ns1.acsalaska.net for denali.gov/A
	Received 736 bytes from 204.17.139.1
	;; Response received from [204.17.139.1] 736 octets ;; HEADER SECTION ;; id = 41687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (2 records) denali.gov. 86400 IN A 198.71.233.237 denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.acsalaska.net is authoritative for denali.gov
	Found RRSIG signed by denali.gov zone
	Query to ns1.acsalaska.net for denali.gov/A
	Received 736 bytes from 204.17.139.1
	;; Response received from [204.17.139.1] 736 octets ;; HEADER SECTION ;; id = 53257 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (2 records) denali.gov. 86400 IN A 198.71.233.237 denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	denali.gov A RR has value 198.71.233.237
	Found 1 RRSIGs over A RRset
	`denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== )`
	RRSIG=41600 and DNSKEY=41600 verifies the A RRset

denali.gov

	Query to ns3.acsalaska.net for denali.gov/A
	Received 736 bytes from 216.67.0.1
	;; Response received from [216.67.0.1] 736 octets ;; HEADER SECTION ;; id = 40379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (2 records) denali.gov. 86400 IN A 198.71.233.237 denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.acsalaska.net is authoritative for denali.gov
	Found RRSIG signed by denali.gov zone
	Query to ns3.acsalaska.net for denali.gov/A
	Received 736 bytes from 216.67.0.1
	;; Response received from [216.67.0.1] 736 octets ;; HEADER SECTION ;; id = 60821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (2 records) denali.gov. 86400 IN A 198.71.233.237 denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	denali.gov A RR has value 198.71.233.237
	Found 1 RRSIGs over A RRset
	`denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== )`
	RRSIG=41600 and DNSKEY=41600 verifies the A RRset

denali.gov

	Query to ns2.acsalaska.net for denali.gov/A
	Received 736 bytes from 209.112.128.1
	;; Response received from [209.112.128.1] 736 octets ;; HEADER SECTION ;; id = 11752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (2 records) denali.gov. 86400 IN A 198.71.233.237 denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.acsalaska.net is authoritative for denali.gov
	Found RRSIG signed by denali.gov zone
	Query to ns2.acsalaska.net for denali.gov/A
	Received 736 bytes from 209.112.128.1
	;; Response received from [209.112.128.1] 736 octets ;; HEADER SECTION ;; id = 24128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; denali.gov. IN A ;; ANSWER SECTION (2 records) denali.gov. 86400 IN A 198.71.233.237 denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== ) ;; AUTHORITY SECTION (5 records) denali.gov. 86400 IN NS ns1.acsalaska.net. denali.gov. 86400 IN NS ns2.acsalaska.net. denali.gov. 86400 IN NS ns3.acsalaska.net. denali.gov. 86400 IN NS ns4.acsalaska.net. denali.gov. 86400 IN RRSIG ( NS 7 2 86400 20251116184635 20251102175051 41600 denali.gov. IQe1hdrZ6EwqfEba6MOwQ/KkooWvzE4b02WkxnUrMdnWu/oAvgS3aBRF53Kdmaegpd61SlUsojzH KmW30rKyv0O35HDMqSpo09ZxU6zHQhXWz9WVRMrNY3OAM9C5jKdEhreMrj3x5GBD0g0dqqBwInDt nD6bnND3XJyBocqJO/S7PuV1KORcClHkHUKovOPm33la1EP72lXMOxqURtb9jFTtj2/w9YGsZ96b JepMLY4vSnRY0Z74zToQmaGbT+OoNcd57xTjVAxY9oEZ2gYDTqam0PbcLv0Ldv46HR83OSYLOR4X MLn75uSCLyg1Fyx9iuW7LjmYAu1FytI2WHT7ug== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	denali.gov A RR has value 198.71.233.237
	Found 1 RRSIGs over A RRset
	`denali.gov. 86400 IN RRSIG ( A 7 2 86400 20251117030625 20251103022612 41600 denali.gov. PRuBr1b7wwnd1LllR4CZptrIR8j1xfuX5uCGHswXjVKLK+xmQiy6Rmq0kWTUZY9aE+rLG3KOeOqn sN+dIReKa89tR8+SKANe2d9ecFWnRpWdrG4wdk6DLo/2S3o8IcWcmx2mq0j5CDTTKNe8v92LLpJU kmM0HagtGzxV91sdeC41TGPzwss1Z7Zv2U3wK7VOjIk/bP3RJGXF8vu+uidWkxeXyzZ2W7v9uKwG ozb6YTeyyrbGszpJcFrB/MjQg5ApM5qBv+pv78kCW71DSi1HMy35hgMk8W6HrsD6zxN1foCvmDCh Y5SoDuSa+zsZIL0CbRGJVGzBYQ+XaX8q36LGxw== )`
	RRSIG=41600 and DNSKEY=41600 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test denali.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: