DNSSEC Analyzer - fdicig.gov

Domain Name:

Time: 2022-01-28 20:10:49 UTC, NTP stratum 16

Analyzing DNSSEC problems for fdicig.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (864 octets) ;; HEADER SECTION ;; id = 2475 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to a.root-servers.net for fdicig.gov/A
	Received 629 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (629 octets) ;; HEADER SECTION ;; id = 13445 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . Ih8bTLLklq7Sd3Cx2PQDVQnizQeeoEakJKbCtH3BS8dHXAe3RyskvHq4SmEBcUBC8yLLiY57Q0QK 2e/VTax5czwdF0hkpvr4Nz1FkIm2Tw0eV5vz0BoudhnDtNiJqdE7ckHXdHrLEls8VcXab1lM6MNq K+sCpY3kg+KsfawHwQos+CHvDPLryviytuxKnZTI2rY4bRtGwhUZWI0twFfCFDNBnnXHQkpUiHcj sE25STT7wRwV6xRnziAJ6E8cXVuc1gkaWyCJauxC/OdEVH3xbKQeH+Kw0bUmPiKRhxw+A5koq2Qs LT3pibI7LiA63YwOSVl/u1qrMVImKRQ4+Yb2Cg== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (622 octets) ;; HEADER SECTION ;; id = 9580 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . Ih8bTLLklq7Sd3Cx2PQDVQnizQeeoEakJKbCtH3BS8dHXAe3RyskvHq4SmEBcUBC8yLLiY57Q0QK 2e/VTax5czwdF0hkpvr4Nz1FkIm2Tw0eV5vz0BoudhnDtNiJqdE7ckHXdHrLEls8VcXab1lM6MNq K+sCpY3kg+KsfawHwQos+CHvDPLryviytuxKnZTI2rY4bRtGwhUZWI0twFfCFDNBnnXHQkpUiHcj sE25STT7wRwV6xRnziAJ6E8cXVuc1gkaWyCJauxC/OdEVH3xbKQeH+Kw0bUmPiKRhxw+A5koq2Qs LT3pibI7LiA63YwOSVl/u1qrMVImKRQ4+Yb2Cg== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to c.root-servers.net for gov/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (367 octets) ;; HEADER SECTION ;; id = 60603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . Ih8bTLLklq7Sd3Cx2PQDVQnizQeeoEakJKbCtH3BS8dHXAe3RyskvHq4SmEBcUBC8yLLiY57Q0QK 2e/VTax5czwdF0hkpvr4Nz1FkIm2Tw0eV5vz0BoudhnDtNiJqdE7ckHXdHrLEls8VcXab1lM6MNq K+sCpY3kg+KsfawHwQos+CHvDPLryviytuxKnZTI2rY4bRtGwhUZWI0twFfCFDNBnnXHQkpUiHcj sE25STT7wRwV6xRnziAJ6E8cXVuc1gkaWyCJauxC/OdEVH3xbKQeH+Kw0bUmPiKRhxw+A5koq2Qs LT3pibI7LiA63YwOSVl/u1qrMVImKRQ4+Yb2Cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . Ih8bTLLklq7Sd3Cx2PQDVQnizQeeoEakJKbCtH3BS8dHXAe3RyskvHq4SmEBcUBC8yLLiY57Q0QK 2e/VTax5czwdF0hkpvr4Nz1FkIm2Tw0eV5vz0BoudhnDtNiJqdE7ckHXdHrLEls8VcXab1lM6MNq K+sCpY3kg+KsfawHwQos+CHvDPLryviytuxKnZTI2rY4bRtGwhUZWI0twFfCFDNBnnXHQkpUiHcj sE25STT7wRwV6xRnziAJ6E8cXVuc1gkaWyCJauxC/OdEVH3xbKQeH+Kw0bUmPiKRhxw+A5koq2Qs LT3pibI7LiA63YwOSVl/u1qrMVImKRQ4+Yb2Cg== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (777 octets) ;; HEADER SECTION ;; id = 58569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcrxKCBVgdzZoceapYfTSdA4A/hRgr01fMqkfcWXPOlSzVxUCJJL/k5ZhtOzmrzpO4RAI+yz DhlVtXF+aXJK1UGIrPT1FCrF5fMup0TBnPCYATjz0BIn+jzCLRyxljwUw11AMYvzYLdF+O0YxbzE XOM+oydCOTbJRWZKKXtG80bZvRwcaa3tqyaPJoNrAaQAQojLHiMrtOmEdjIb2TTx95s= ) ; Key ID = 7030 gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220203200254 20220119195754 7698 gov. krNKH8YoFOOvIraLx75fDnwyRV1mFV0P3N46gcG5rKurxZzjK+zZx+YWwNDjvnSss3ju//rZXJQF SznBdg/q00S7YItRCOkVniNy26aVhZqeoywyrkBCVEo4hjOiRn87Mmj3p9pbM45FZib72itC7MCc jbx/dOKC0C4OQTNDXjqE+5zdx84CVPKwVE81gxl3UQfX27FcOUkdCQScD7dQyQbUkb23s1ephHWQ p4mLmyR0yo601uP05Apo7Gxr8vTcx9BcNQdbvj3X6tzpx330kkPcLSbQcEhxqDbqXQzxa7UwCcUr ZjoT7fAetOTRunxwG61xWtMtRC4KlhLlEYaYiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcrxKCBVgdzZoceapYfTSdA4A/hRgr01fMqkfcWXPOlSzVxUCJJL/k5ZhtOzmrzpO4RAI+yz DhlVtXF+aXJK1UGIrPT1FCrF5fMup0TBnPCYATjz0BIn+jzCLRyxljwUw11AMYvzYLdF+O0YxbzE XOM+oydCOTbJRWZKKXtG80bZvRwcaa3tqyaPJoNrAaQAQojLHiMrtOmEdjIb2TTx95s= ) ; Key ID = 7030`
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220203200254 20220119195754 7698 gov. krNKH8YoFOOvIraLx75fDnwyRV1mFV0P3N46gcG5rKurxZzjK+zZx+YWwNDjvnSss3ju//rZXJQF SznBdg/q00S7YItRCOkVniNy26aVhZqeoywyrkBCVEo4hjOiRn87Mmj3p9pbM45FZib72itC7MCc jbx/dOKC0C4OQTNDXjqE+5zdx84CVPKwVE81gxl3UQfX27FcOUkdCQScD7dQyQbUkb23s1ephHWQ p4mLmyR0yo601uP05Apo7Gxr8vTcx9BcNQdbvj3X6tzpx330kkPcLSbQcEhxqDbqXQzxa7UwCcUr ZjoT7fAetOTRunxwG61xWtMtRC4KlhLlEYaYiA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7030 is now in the chain-of-trust
	Query to d.gov-servers.net for fdicig.gov/A
	Received 534 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (534 octets) ;; HEADER SECTION ;; id = 1244 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) fdicig.gov. 86400 IN NS a18-64.akam.net. fdicig.gov. 86400 IN NS a10-66.akam.net. fdicig.gov. 86400 IN NS a1-55.akam.net. fdicig.gov. 86400 IN NS a28-65.akam.net. fdicig.gov. 86400 IN NS a13-67.akam.net. fdicig.gov. 86400 IN NS a9-66.akam.net. fdicig.gov. 3600 IN DS 29440 8 1 7e180ce0d5600c7297ab5abf2bc1ef761ef183cb fdicig.gov. 3600 IN DS 21811 8 1 681aa47a28c0f6f8dc23ac9f1cf7d0b67c8cc92e fdicig.gov. 3600 IN DS ( 29440 8 2 32588f3ea4169654dc02a3111c3387df3e32e1694a96e82b6cf403047d8a1afa ) fdicig.gov. 3600 IN DS ( 21811 8 2 b1d0c420c351764ac60895335d50935ee8b2c0a2bfe7e3f81940555c37d5f4dc ) fdicig.gov. 3600 IN RRSIG ( DS 8 2 3600 20220202024110 20220126024110 7030 gov. rk8vKKmLDkCTcxupwaVGuZdbEEbg6DPtjzkCFZO7N4tiwLchnvPG7GafWOQhNOkXfs4Tu6qLL+hK iN1kIWFNsQPaffvbq6mPykmHIhMCo5HfE4kM/qF4bZGMQQ1bMXujzW1uMU1I3GEqXaSUCeeAcJo+ 5uuXGlqRanOkUXc/HEi/utnPrHpGfkul4/+w/vFhDE35TyqlhkWFecznrBAgNg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for fdicig.gov/DNSKEY
	Received 534 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (534 octets) ;; HEADER SECTION ;; id = 29217 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) fdicig.gov. 86400 IN NS a18-64.akam.net. fdicig.gov. 86400 IN NS a10-66.akam.net. fdicig.gov. 86400 IN NS a1-55.akam.net. fdicig.gov. 86400 IN NS a28-65.akam.net. fdicig.gov. 86400 IN NS a13-67.akam.net. fdicig.gov. 86400 IN NS a9-66.akam.net. fdicig.gov. 3600 IN DS 29440 8 1 7e180ce0d5600c7297ab5abf2bc1ef761ef183cb fdicig.gov. 3600 IN DS 21811 8 1 681aa47a28c0f6f8dc23ac9f1cf7d0b67c8cc92e fdicig.gov. 3600 IN DS ( 29440 8 2 32588f3ea4169654dc02a3111c3387df3e32e1694a96e82b6cf403047d8a1afa ) fdicig.gov. 3600 IN DS ( 21811 8 2 b1d0c420c351764ac60895335d50935ee8b2c0a2bfe7e3f81940555c37d5f4dc ) fdicig.gov. 3600 IN RRSIG ( DS 8 2 3600 20220202024110 20220126024110 7030 gov. rk8vKKmLDkCTcxupwaVGuZdbEEbg6DPtjzkCFZO7N4tiwLchnvPG7GafWOQhNOkXfs4Tu6qLL+hK iN1kIWFNsQPaffvbq6mPykmHIhMCo5HfE4kM/qF4bZGMQQ1bMXujzW1uMU1I3GEqXaSUCeeAcJo+ 5uuXGlqRanOkUXc/HEi/utnPrHpGfkul4/+w/vFhDE35TyqlhkWFecznrBAgNg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone fdicig.gov

fdicig.gov

	Checking DS between gov and fdicig.gov
	Query to b.gov-servers.net for fdicig.gov/DS
	Received 402 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (402 octets) ;; HEADER SECTION ;; id = 48311 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN DS ;; ANSWER SECTION (5 records) fdicig.gov. 3600 IN DS 29440 8 1 7e180ce0d5600c7297ab5abf2bc1ef761ef183cb fdicig.gov. 3600 IN DS 21811 8 1 681aa47a28c0f6f8dc23ac9f1cf7d0b67c8cc92e fdicig.gov. 3600 IN DS ( 29440 8 2 32588f3ea4169654dc02a3111c3387df3e32e1694a96e82b6cf403047d8a1afa ) fdicig.gov. 3600 IN DS ( 21811 8 2 b1d0c420c351764ac60895335d50935ee8b2c0a2bfe7e3f81940555c37d5f4dc ) fdicig.gov. 3600 IN RRSIG ( DS 8 2 3600 20220202024110 20220126024110 7030 gov. rk8vKKmLDkCTcxupwaVGuZdbEEbg6DPtjzkCFZO7N4tiwLchnvPG7GafWOQhNOkXfs4Tu6qLL+hK iN1kIWFNsQPaffvbq6mPykmHIhMCo5HfE4kM/qF4bZGMQQ1bMXujzW1uMU1I3GEqXaSUCeeAcJo+ 5uuXGlqRanOkUXc/HEi/utnPrHpGfkul4/+w/vFhDE35TyqlhkWFecznrBAgNg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for fdicig.gov in the gov zone
	DS=29440/SHA-1 has algorithm RSASHA256
	DS=21811/SHA-1 has algorithm RSASHA256
	DS=29440/SHA-256 has algorithm RSASHA256
	DS=21811/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fdicig.gov. 3600 IN RRSIG ( DS 8 2 3600 20220202024110 20220126024110 7030 gov. rk8vKKmLDkCTcxupwaVGuZdbEEbg6DPtjzkCFZO7N4tiwLchnvPG7GafWOQhNOkXfs4Tu6qLL+hK iN1kIWFNsQPaffvbq6mPykmHIhMCo5HfE4kM/qF4bZGMQQ1bMXujzW1uMU1I3GEqXaSUCeeAcJo+ 5uuXGlqRanOkUXc/HEi/utnPrHpGfkul4/+w/vFhDE35TyqlhkWFecznrBAgNg== )`
	RRSIG=7030 and DNSKEY=7030 verifies the DS RRset
	DS=29440/SHA-1 is now in the chain-of-trust
	DS=21811/SHA-1 is now in the chain-of-trust
	`fdicig.gov. 3600 IN DS 29440 8 1 7e180ce0d5600c7297ab5abf2bc1ef761ef183cb`
	`fdicig.gov. 3600 IN DS 21811 8 1 681aa47a28c0f6f8dc23ac9f1cf7d0b67c8cc92e`
	`fdicig.gov. 3600 IN DS ( 29440 8 2 32588f3ea4169654dc02a3111c3387df3e32e1694a96e82b6cf403047d8a1afa )`
	`fdicig.gov. 3600 IN DS ( 21811 8 2 b1d0c420c351764ac60895335d50935ee8b2c0a2bfe7e3f81940555c37d5f4dc )`
	Query to a28-65.akam.net for fdicig.gov/DNSKEY
	Received 1823 bytes from 95.100.173.65
	;; Response received from 95.100.173.65 (1823 octets) ;; HEADER SECTION ;; id = 38122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN DNSKEY ;; ANSWER SECTION (8 records) fdicig.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAb4Hku9//jw0QgYvMH9vYqV9OyHVepf23AgaHcLm8J1S8f8rsZWK+dVNBIzj57OkHq/cmOqa JDnHmChirY89nhrh6YM3UyBw7MHSwN+DE1ThlzjR1xe5SwDQ2emhQpP9qullLuPcObDLSSloDhCh I6X6dwKBYPn2PuOHqHHIsx20esgRgS7l3Gmb9P7UZxV1f07ykfGAvnP29RHFs00KcfUYkC5p7vo4 GZkRN8leYyTiSyFy2L7dPjumR0M/O4n84lmX47AmIkz39al+6NcKn405fVTyjvSnRyF9nlMC/v7D hobqi/r7R5FkXNH5ZG/qaxF+Ib13F8IrbT07yntKdH8= ) ; Key ID = 29440 fdicig.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbWrwsRXWB4r54BUn3IHdlTs4daNRrUHb88MX+XEwUT7co+PoxWKeTztjxQOAwti5W71eRf7 oSW0k7YWigL2bQg3V9f3NrnrWlQ2brS5HRI2yL6oKKt52qWLfML5oJJ2p1iwXpxwEutKwSD2aNY3 JPVbFzZ8CbYKhd0yrgeTKhRZEV+ghbFSspbGMXqEr+1CIgtPE2xmzT2ubVEVl4lHZ78SVyA6VG0A nClL8ygui8QCSnmlxPhNvK5WGQqC0ziX1LIMFOUdiDeO5aFMFDva3kqTgxyEM/Fzh3VeYGmiiBIF MGeZRhNzYiUl3E724hG72eyt8fvoffp+XTdktAvkaJU= ) ; Key ID = 21811 fdicig.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAdhSWyBj7xvsyAPNBMPmcSw47RYdMCIIgKlZ9EdIk8TEa4d5zSREm9Bjfli3inIJ6XmdLcjT SQ46E8zq9BiTxz0goTFp445hF02UHh0vIlHXME1sQlNv2QtDFYRbpyl8hBz2NPqKCJ38pbhSm3X/ 8Fpg+Lhc4dmIZKDxATkTlnnj ) ; Key ID = 55281 fdicig.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAb9BGiqDleI5qDh/iBr1jF+z1EqxYHV2tGbq2oWp/9GeacLP3BNpxmTFOH/qt8fbd3anJbPp 1gSJylLwaRArNfLAEWsv9jll9QLfK0jWt62aAW4KK8tPXOEBc2cMpF4/4SbdxCl7HcQ9Cjxsb1Os DeUCZOdwDDA3wjvliOr80K+p ) ; Key ID = 31650 fdicig.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20220201065101 20220128062748 29440 fdicig.gov. ojoFt+TPeZQHPZNHFbKD7Oz6K7IzMWwnPNWDUmmYcmr3PgE73R3Oq5jdpnKPWjh93W4zGUdDpLH4 fy0u9AwlZHHiz7fjhG95CvROO1Z0MDzfLKM7LJBcI2N696TXkiVpTzDOiDxwChdLfZfwJZ+A6ZnI vB3F0OzFkz89rT4a/Raaqp77/6ONQE9iOs/H2SvwCgwVq5W+fRQ9nHcI95rZL48v2EmFFPMTrYYF wl5rbEzzoAwnIDnOZhFWUjVeyrzjTkPcYA0gO1sTy2bH4XkG6k53//A/RL4gsbfpJ68UyfnaSU27 GpJF+JyD97u70pjAyc6i0TMzerz4YbbBbRapOA== ) fdicig.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20220201065101 20220128062748 21811 fdicig.gov. rJxUiJQtg1mBC1l2S7uBqxeJcrOy+3hMlBQjKdeddjVwydAxOCBOvyi3S58d1A9JooreN9ywoaHk 29DXmH2kcBRjfaiBAuF/I/Hi6GUbH13vNfocxf+eUwybtQqPtTOVMayp4jI81Lz6v0rdTW7CMFqK yjdSEpizTpEst56HAKiCw1i95ivKUqzE20n8IiB+sQ0J/6MduugYNeUP43Z+xrihWc9aD/XhDYhz bbyxm8DmVRMnxDHZDui+O0EBJSbePmiETeg2yGuuKDeO+PwANrohQs3JSpcQa4ueWpNnbYIiiKQ7 ogDaOxjJB0Fi4Vj/WVQ2I5dwqQN6Ll74r2my2g== ) fdicig.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20220201065101 20220128062748 31650 fdicig.gov. lxyS758w3qBj0kavr9EcRQbR2wl/qZvcWG1VyhifHCdG4J6pGxZcXVSwxPJqL+YmAbk5RrL4NmWf CmL1GzyHt9Z36L3m58aRJeA4iCfew/hWSYfOMJY2yIz+R4aMxXxIR5cUCtI+yMMvwTvj+7Ajjgde k2aWMxwIQmshImrech0= ) fdicig.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20220201065101 20220128062748 55281 fdicig.gov. pAUcVl0cuF309gbxO66UhgFp61xFVEtqXeC5dmH9Pd2XXX+p2MTphj48zA1FOh3MFGukyyFIzNKr nvEQN+hDOFHWiAyLapVh1Uiay1fzfL9vexc2q7/EPuJkIn3De51SkWb7+E3QPEzFVk+f4lrYoXPY 1Rk/vE4wFKJqjYrT7jE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for fdicig.gov
	`fdicig.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAb4Hku9//jw0QgYvMH9vYqV9OyHVepf23AgaHcLm8J1S8f8rsZWK+dVNBIzj57OkHq/cmOqa JDnHmChirY89nhrh6YM3UyBw7MHSwN+DE1ThlzjR1xe5SwDQ2emhQpP9qullLuPcObDLSSloDhCh I6X6dwKBYPn2PuOHqHHIsx20esgRgS7l3Gmb9P7UZxV1f07ykfGAvnP29RHFs00KcfUYkC5p7vo4 GZkRN8leYyTiSyFy2L7dPjumR0M/O4n84lmX47AmIkz39al+6NcKn405fVTyjvSnRyF9nlMC/v7D hobqi/r7R5FkXNH5ZG/qaxF+Ib13F8IrbT07yntKdH8= ) ; Key ID = 29440`
	`fdicig.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbWrwsRXWB4r54BUn3IHdlTs4daNRrUHb88MX+XEwUT7co+PoxWKeTztjxQOAwti5W71eRf7 oSW0k7YWigL2bQg3V9f3NrnrWlQ2brS5HRI2yL6oKKt52qWLfML5oJJ2p1iwXpxwEutKwSD2aNY3 JPVbFzZ8CbYKhd0yrgeTKhRZEV+ghbFSspbGMXqEr+1CIgtPE2xmzT2ubVEVl4lHZ78SVyA6VG0A nClL8ygui8QCSnmlxPhNvK5WGQqC0ziX1LIMFOUdiDeO5aFMFDva3kqTgxyEM/Fzh3VeYGmiiBIF MGeZRhNzYiUl3E724hG72eyt8fvoffp+XTdktAvkaJU= ) ; Key ID = 21811`
	`fdicig.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAdhSWyBj7xvsyAPNBMPmcSw47RYdMCIIgKlZ9EdIk8TEa4d5zSREm9Bjfli3inIJ6XmdLcjT SQ46E8zq9BiTxz0goTFp445hF02UHh0vIlHXME1sQlNv2QtDFYRbpyl8hBz2NPqKCJ38pbhSm3X/ 8Fpg+Lhc4dmIZKDxATkTlnnj ) ; Key ID = 55281`
	`fdicig.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAb9BGiqDleI5qDh/iBr1jF+z1EqxYHV2tGbq2oWp/9GeacLP3BNpxmTFOH/qt8fbd3anJbPp 1gSJylLwaRArNfLAEWsv9jll9QLfK0jWt62aAW4KK8tPXOEBc2cMpF4/4SbdxCl7HcQ9Cjxsb1Os DeUCZOdwDDA3wjvliOr80K+p ) ; Key ID = 31650`
	DNSKEY=29440/SEP is now in the chain-of-trust
	DS=29440/SHA-1 verifies DNSKEY=29440/SEP
	DS=29440/SHA-256 verifies DNSKEY=29440/SEP
	DNSKEY=21811/SEP is now in the chain-of-trust
	DS=21811/SHA-1 verifies DNSKEY=21811/SEP
	DS=21811/SHA-256 verifies DNSKEY=21811/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`fdicig.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20220201065101 20220128062748 29440 fdicig.gov. ojoFt+TPeZQHPZNHFbKD7Oz6K7IzMWwnPNWDUmmYcmr3PgE73R3Oq5jdpnKPWjh93W4zGUdDpLH4 fy0u9AwlZHHiz7fjhG95CvROO1Z0MDzfLKM7LJBcI2N696TXkiVpTzDOiDxwChdLfZfwJZ+A6ZnI vB3F0OzFkz89rT4a/Raaqp77/6ONQE9iOs/H2SvwCgwVq5W+fRQ9nHcI95rZL48v2EmFFPMTrYYF wl5rbEzzoAwnIDnOZhFWUjVeyrzjTkPcYA0gO1sTy2bH4XkG6k53//A/RL4gsbfpJ68UyfnaSU27 GpJF+JyD97u70pjAyc6i0TMzerz4YbbBbRapOA== )`
	`fdicig.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20220201065101 20220128062748 21811 fdicig.gov. rJxUiJQtg1mBC1l2S7uBqxeJcrOy+3hMlBQjKdeddjVwydAxOCBOvyi3S58d1A9JooreN9ywoaHk 29DXmH2kcBRjfaiBAuF/I/Hi6GUbH13vNfocxf+eUwybtQqPtTOVMayp4jI81Lz6v0rdTW7CMFqK yjdSEpizTpEst56HAKiCw1i95ivKUqzE20n8IiB+sQ0J/6MduugYNeUP43Z+xrihWc9aD/XhDYhz bbyxm8DmVRMnxDHZDui+O0EBJSbePmiETeg2yGuuKDeO+PwANrohQs3JSpcQa4ueWpNnbYIiiKQ7 ogDaOxjJB0Fi4Vj/WVQ2I5dwqQN6Ll74r2my2g== )`
	`fdicig.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20220201065101 20220128062748 31650 fdicig.gov. lxyS758w3qBj0kavr9EcRQbR2wl/qZvcWG1VyhifHCdG4J6pGxZcXVSwxPJqL+YmAbk5RrL4NmWf CmL1GzyHt9Z36L3m58aRJeA4iCfew/hWSYfOMJY2yIz+R4aMxXxIR5cUCtI+yMMvwTvj+7Ajjgde k2aWMxwIQmshImrech0= )`
	`fdicig.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20220201065101 20220128062748 55281 fdicig.gov. pAUcVl0cuF309gbxO66UhgFp61xFVEtqXeC5dmH9Pd2XXX+p2MTphj48zA1FOh3MFGukyyFIzNKr nvEQN+hDOFHWiAyLapVh1Uiay1fzfL9vexc2q7/EPuJkIn3De51SkWb7+E3QPEzFVk+f4lrYoXPY 1Rk/vE4wFKJqjYrT7jE= )`
	RRSIG=29440 and DNSKEY=29440/SEP verifies the DNSKEY RRset
	RRSIG=21811 and DNSKEY=21811/SEP verifies the DNSKEY RRset
	RRSIG=31650 and DNSKEY=31650 verifies the DNSKEY RRset
	RRSIG=55281 and DNSKEY=55281 verifies the DNSKEY RRset
	DNSKEY=55281 is now in the chain-of-trust
	DNSKEY=31650 is now in the chain-of-trust
	Query to a18-64.akam.net for fdicig.gov/A
	Received 395 bytes from 95.101.36.64
	;; Response received from 95.101.36.64 (395 octets) ;; HEADER SECTION ;; id = 44594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a18-64.akam.net is authoritative for fdicig.gov
	Found RRSIG signed by fdicig.gov zone
	Query to a28-65.akam.net for fdicig.gov/SOA
	Received 912 bytes from 95.100.173.65
	;; Response received from 95.100.173.65 (912 octets) ;; HEADER SECTION ;; id = 23406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN SOA ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN SOA ( dfwcnsgms01.fdic.gov. unixops.fdic.gov. 2011158548 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 31650 fdicig.gov. bgIevlqlDIRVr4FClEwDbSeOPb4PAn5K1JHFyMAJZB4kS0fSWEqBXk5bl3ke7GhvaSTV334AObSe LX/oLkkij/fnWc1Sptw5jzlu/tRmeuxqfaGw1aTnVAeF9slDljKEMLJtIbq0KruA9XfWnjDDc4DT WfpE9bnjMxCnBrr3J0k= ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 55281 fdicig.gov. hP2xI3HfpncVOxHkHorBnK/Yt0yPA2IK4ZpYy2G93RKoHaboDAmGY/z0TH6gKrlXZjVrnfOaGY3X OgoLOGKyxlv3B7zPXIqT8dwGqqVVWrJ1A+h816Ud+wSQWAgOZifIsCPn7xKSp0cR7i3baK5MWO3P vTYbTo3mNqjpDBcsLNs= ) ;; AUTHORITY SECTION (8 records) fdicig.gov. 900 IN NS a13-67.akam.net. fdicig.gov. 900 IN NS a28-65.akam.net. fdicig.gov. 900 IN NS a1-55.akam.net. fdicig.gov. 900 IN NS a9-66.akam.net. fdicig.gov. 900 IN NS a10-66.akam.net. fdicig.gov. 900 IN NS a18-64.akam.net. fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 31650 fdicig.gov. XGy0nFB5Ne67ybb/RRo8v7PUX5Kb9T/vLgI1NaVnbfbwHMMlSMFuB0Hd5Pj+nvPKt0LKGy+MqxxY FrQ9+8FuW1U9IBosQpCYv9V2ts2tr2mON4G5zEflR41FVExDJREI5mRFVLAq07uX+hrs/Z5osnjH iI7YxAPPhjF1UMGc0kE= ) fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 55281 fdicig.gov. f8xXnjHW3+XeYTZaTrDezPL1bqUnZaUMeN5pKEQnAeZSrWB6xewxY9RS6A5Sg/c/iBhgB93pFsHq +eJhNDjpFGu8TbZ4UDebv6LzX+7ggLV4sn0P+k88bjKEwaboj+LAC+ovd0eGwgc2WvEPkudxtHGm FVt2LeuUwFUFqhdb+/g= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a13-67.akam.net for fdicig.gov/SOA
	Received 912 bytes from 2.22.230.67
	;; Response received from 2.22.230.67 (912 octets) ;; HEADER SECTION ;; id = 55851 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN SOA ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN SOA ( dfwcnsgms01.fdic.gov. unixops.fdic.gov. 2011158548 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 31650 fdicig.gov. bgIevlqlDIRVr4FClEwDbSeOPb4PAn5K1JHFyMAJZB4kS0fSWEqBXk5bl3ke7GhvaSTV334AObSe LX/oLkkij/fnWc1Sptw5jzlu/tRmeuxqfaGw1aTnVAeF9slDljKEMLJtIbq0KruA9XfWnjDDc4DT WfpE9bnjMxCnBrr3J0k= ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 55281 fdicig.gov. hP2xI3HfpncVOxHkHorBnK/Yt0yPA2IK4ZpYy2G93RKoHaboDAmGY/z0TH6gKrlXZjVrnfOaGY3X OgoLOGKyxlv3B7zPXIqT8dwGqqVVWrJ1A+h816Ud+wSQWAgOZifIsCPn7xKSp0cR7i3baK5MWO3P vTYbTo3mNqjpDBcsLNs= ) ;; AUTHORITY SECTION (8 records) fdicig.gov. 900 IN NS a13-67.akam.net. fdicig.gov. 900 IN NS a10-66.akam.net. fdicig.gov. 900 IN NS a1-55.akam.net. fdicig.gov. 900 IN NS a28-65.akam.net. fdicig.gov. 900 IN NS a18-64.akam.net. fdicig.gov. 900 IN NS a9-66.akam.net. fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 31650 fdicig.gov. XGy0nFB5Ne67ybb/RRo8v7PUX5Kb9T/vLgI1NaVnbfbwHMMlSMFuB0Hd5Pj+nvPKt0LKGy+MqxxY FrQ9+8FuW1U9IBosQpCYv9V2ts2tr2mON4G5zEflR41FVExDJREI5mRFVLAq07uX+hrs/Z5osnjH iI7YxAPPhjF1UMGc0kE= ) fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 55281 fdicig.gov. f8xXnjHW3+XeYTZaTrDezPL1bqUnZaUMeN5pKEQnAeZSrWB6xewxY9RS6A5Sg/c/iBhgB93pFsHq +eJhNDjpFGu8TbZ4UDebv6LzX+7ggLV4sn0P+k88bjKEwaboj+LAC+ovd0eGwgc2WvEPkudxtHGm FVt2LeuUwFUFqhdb+/g= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a10-66.akam.net for fdicig.gov/SOA
	Received 912 bytes from 96.7.50.66
	;; Response received from 96.7.50.66 (912 octets) ;; HEADER SECTION ;; id = 32735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN SOA ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN SOA ( dfwcnsgms01.fdic.gov. unixops.fdic.gov. 2011158548 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 31650 fdicig.gov. bgIevlqlDIRVr4FClEwDbSeOPb4PAn5K1JHFyMAJZB4kS0fSWEqBXk5bl3ke7GhvaSTV334AObSe LX/oLkkij/fnWc1Sptw5jzlu/tRmeuxqfaGw1aTnVAeF9slDljKEMLJtIbq0KruA9XfWnjDDc4DT WfpE9bnjMxCnBrr3J0k= ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 55281 fdicig.gov. hP2xI3HfpncVOxHkHorBnK/Yt0yPA2IK4ZpYy2G93RKoHaboDAmGY/z0TH6gKrlXZjVrnfOaGY3X OgoLOGKyxlv3B7zPXIqT8dwGqqVVWrJ1A+h816Ud+wSQWAgOZifIsCPn7xKSp0cR7i3baK5MWO3P vTYbTo3mNqjpDBcsLNs= ) ;; AUTHORITY SECTION (8 records) fdicig.gov. 900 IN NS a13-67.akam.net. fdicig.gov. 900 IN NS a1-55.akam.net. fdicig.gov. 900 IN NS a10-66.akam.net. fdicig.gov. 900 IN NS a9-66.akam.net. fdicig.gov. 900 IN NS a28-65.akam.net. fdicig.gov. 900 IN NS a18-64.akam.net. fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 31650 fdicig.gov. XGy0nFB5Ne67ybb/RRo8v7PUX5Kb9T/vLgI1NaVnbfbwHMMlSMFuB0Hd5Pj+nvPKt0LKGy+MqxxY FrQ9+8FuW1U9IBosQpCYv9V2ts2tr2mON4G5zEflR41FVExDJREI5mRFVLAq07uX+hrs/Z5osnjH iI7YxAPPhjF1UMGc0kE= ) fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 55281 fdicig.gov. f8xXnjHW3+XeYTZaTrDezPL1bqUnZaUMeN5pKEQnAeZSrWB6xewxY9RS6A5Sg/c/iBhgB93pFsHq +eJhNDjpFGu8TbZ4UDebv6LzX+7ggLV4sn0P+k88bjKEwaboj+LAC+ovd0eGwgc2WvEPkudxtHGm FVt2LeuUwFUFqhdb+/g= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a9-66.akam.net for fdicig.gov/SOA
	Received 912 bytes from 184.85.248.66
	;; Response received from 184.85.248.66 (912 octets) ;; HEADER SECTION ;; id = 54644 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN SOA ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN SOA ( dfwcnsgms01.fdic.gov. unixops.fdic.gov. 2011158548 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 31650 fdicig.gov. bgIevlqlDIRVr4FClEwDbSeOPb4PAn5K1JHFyMAJZB4kS0fSWEqBXk5bl3ke7GhvaSTV334AObSe LX/oLkkij/fnWc1Sptw5jzlu/tRmeuxqfaGw1aTnVAeF9slDljKEMLJtIbq0KruA9XfWnjDDc4DT WfpE9bnjMxCnBrr3J0k= ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 55281 fdicig.gov. hP2xI3HfpncVOxHkHorBnK/Yt0yPA2IK4ZpYy2G93RKoHaboDAmGY/z0TH6gKrlXZjVrnfOaGY3X OgoLOGKyxlv3B7zPXIqT8dwGqqVVWrJ1A+h816Ud+wSQWAgOZifIsCPn7xKSp0cR7i3baK5MWO3P vTYbTo3mNqjpDBcsLNs= ) ;; AUTHORITY SECTION (8 records) fdicig.gov. 900 IN NS a28-65.akam.net. fdicig.gov. 900 IN NS a1-55.akam.net. fdicig.gov. 900 IN NS a18-64.akam.net. fdicig.gov. 900 IN NS a10-66.akam.net. fdicig.gov. 900 IN NS a13-67.akam.net. fdicig.gov. 900 IN NS a9-66.akam.net. fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 31650 fdicig.gov. XGy0nFB5Ne67ybb/RRo8v7PUX5Kb9T/vLgI1NaVnbfbwHMMlSMFuB0Hd5Pj+nvPKt0LKGy+MqxxY FrQ9+8FuW1U9IBosQpCYv9V2ts2tr2mON4G5zEflR41FVExDJREI5mRFVLAq07uX+hrs/Z5osnjH iI7YxAPPhjF1UMGc0kE= ) fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 55281 fdicig.gov. f8xXnjHW3+XeYTZaTrDezPL1bqUnZaUMeN5pKEQnAeZSrWB6xewxY9RS6A5Sg/c/iBhgB93pFsHq +eJhNDjpFGu8TbZ4UDebv6LzX+7ggLV4sn0P+k88bjKEwaboj+LAC+ovd0eGwgc2WvEPkudxtHGm FVt2LeuUwFUFqhdb+/g= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a1-55.akam.net for fdicig.gov/SOA
	Received 912 bytes from 193.108.91.55
	;; Response received from 193.108.91.55 (912 octets) ;; HEADER SECTION ;; id = 54814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN SOA ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN SOA ( dfwcnsgms01.fdic.gov. unixops.fdic.gov. 2011158548 ;serial 7200 ;refresh 720 ;retry 1209600 ;expire 900 ;minimum ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 31650 fdicig.gov. bgIevlqlDIRVr4FClEwDbSeOPb4PAn5K1JHFyMAJZB4kS0fSWEqBXk5bl3ke7GhvaSTV334AObSe LX/oLkkij/fnWc1Sptw5jzlu/tRmeuxqfaGw1aTnVAeF9slDljKEMLJtIbq0KruA9XfWnjDDc4DT WfpE9bnjMxCnBrr3J0k= ) fdicig.gov. 900 IN RRSIG ( SOA 8 2 900 20220201102018 20220128092018 55281 fdicig.gov. hP2xI3HfpncVOxHkHorBnK/Yt0yPA2IK4ZpYy2G93RKoHaboDAmGY/z0TH6gKrlXZjVrnfOaGY3X OgoLOGKyxlv3B7zPXIqT8dwGqqVVWrJ1A+h816Ud+wSQWAgOZifIsCPn7xKSp0cR7i3baK5MWO3P vTYbTo3mNqjpDBcsLNs= ) ;; AUTHORITY SECTION (8 records) fdicig.gov. 900 IN NS a1-55.akam.net. fdicig.gov. 900 IN NS a10-66.akam.net. fdicig.gov. 900 IN NS a9-66.akam.net. fdicig.gov. 900 IN NS a18-64.akam.net. fdicig.gov. 900 IN NS a13-67.akam.net. fdicig.gov. 900 IN NS a28-65.akam.net. fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 31650 fdicig.gov. XGy0nFB5Ne67ybb/RRo8v7PUX5Kb9T/vLgI1NaVnbfbwHMMlSMFuB0Hd5Pj+nvPKt0LKGy+MqxxY FrQ9+8FuW1U9IBosQpCYv9V2ts2tr2mON4G5zEflR41FVExDJREI5mRFVLAq07uX+hrs/Z5osnjH iI7YxAPPhjF1UMGc0kE= ) fdicig.gov. 900 IN RRSIG ( NS 8 2 900 20220201100441 20220128092018 55281 fdicig.gov. f8xXnjHW3+XeYTZaTrDezPL1bqUnZaUMeN5pKEQnAeZSrWB6xewxY9RS6A5Sg/c/iBhgB93pFsHq +eJhNDjpFGu8TbZ4UDebv6LzX+7ggLV4sn0P+k88bjKEwaboj+LAC+ovd0eGwgc2WvEPkudxtHGm FVt2LeuUwFUFqhdb+/g= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a18-64.akam.net for fdicig.gov/A
	Received 395 bytes from 95.101.36.64
	;; Response received from 95.101.36.64 (395 octets) ;; HEADER SECTION ;; id = 43555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fdicig.gov A RR has value 184.80.193.47
	Found 2 RRSIGs over A RRset
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= )`
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= )`
	RRSIG=31650 and DNSKEY=31650 verifies the A RRset
	RRSIG=55281 and DNSKEY=55281 verifies the A RRset

fdicig.gov

	Query to a10-66.akam.net for fdicig.gov/A
	Received 395 bytes from 96.7.50.66
	;; Response received from 96.7.50.66 (395 octets) ;; HEADER SECTION ;; id = 5140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a10-66.akam.net is authoritative for fdicig.gov
	Found RRSIG signed by fdicig.gov zone
	Query to a10-66.akam.net for fdicig.gov/A
	Received 395 bytes from 96.7.50.66
	;; Response received from 96.7.50.66 (395 octets) ;; HEADER SECTION ;; id = 18034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fdicig.gov A RR has value 184.80.193.47
	Found 2 RRSIGs over A RRset
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= )`
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= )`
	RRSIG=31650 and DNSKEY=31650 verifies the A RRset
	RRSIG=55281 and DNSKEY=55281 verifies the A RRset

fdicig.gov

	Query to a9-66.akam.net for fdicig.gov/A
	Received 395 bytes from 184.85.248.66
	;; Response received from 184.85.248.66 (395 octets) ;; HEADER SECTION ;; id = 18338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a9-66.akam.net is authoritative for fdicig.gov
	Found RRSIG signed by fdicig.gov zone
	Query to a9-66.akam.net for fdicig.gov/A
	Received 395 bytes from 184.85.248.66
	;; Response received from 184.85.248.66 (395 octets) ;; HEADER SECTION ;; id = 23038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fdicig.gov A RR has value 184.80.193.47
	Found 2 RRSIGs over A RRset
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= )`
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= )`
	RRSIG=31650 and DNSKEY=31650 verifies the A RRset
	RRSIG=55281 and DNSKEY=55281 verifies the A RRset

fdicig.gov

	Query to a28-65.akam.net for fdicig.gov/A
	Received 395 bytes from 95.100.173.65
	;; Response received from 95.100.173.65 (395 octets) ;; HEADER SECTION ;; id = 64425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a28-65.akam.net is authoritative for fdicig.gov
	Found RRSIG signed by fdicig.gov zone
	Query to a28-65.akam.net for fdicig.gov/A
	Received 395 bytes from 95.100.173.65
	;; Response received from 95.100.173.65 (395 octets) ;; HEADER SECTION ;; id = 18654 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fdicig.gov A RR has value 184.80.193.47
	Found 2 RRSIGs over A RRset
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= )`
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= )`
	RRSIG=31650 and DNSKEY=31650 verifies the A RRset
	RRSIG=55281 and DNSKEY=55281 verifies the A RRset

fdicig.gov

	Query to a13-67.akam.net for fdicig.gov/A
	Received 395 bytes from 2.22.230.67
	;; Response received from 2.22.230.67 (395 octets) ;; HEADER SECTION ;; id = 27797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a13-67.akam.net is authoritative for fdicig.gov
	Found RRSIG signed by fdicig.gov zone
	Query to a13-67.akam.net for fdicig.gov/A
	Received 395 bytes from 2.22.230.67
	;; Response received from 2.22.230.67 (395 octets) ;; HEADER SECTION ;; id = 6678 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fdicig.gov A RR has value 184.80.193.47
	Found 2 RRSIGs over A RRset
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= )`
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= )`
	RRSIG=31650 and DNSKEY=31650 verifies the A RRset
	RRSIG=55281 and DNSKEY=55281 verifies the A RRset

fdicig.gov

	Query to a1-55.akam.net for fdicig.gov/A
	Received 395 bytes from 193.108.91.55
	;; Response received from 193.108.91.55 (395 octets) ;; HEADER SECTION ;; id = 5513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a1-55.akam.net is authoritative for fdicig.gov
	Found RRSIG signed by fdicig.gov zone
	Query to a1-55.akam.net for fdicig.gov/A
	Received 395 bytes from 193.108.91.55
	;; Response received from 193.108.91.55 (395 octets) ;; HEADER SECTION ;; id = 1589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fdicig.gov. IN A ;; ANSWER SECTION (3 records) fdicig.gov. 900 IN A 184.80.193.47 fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= ) fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fdicig.gov A RR has value 184.80.193.47
	Found 2 RRSIGs over A RRset
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 31650 fdicig.gov. GcZKvrhClMPFJMFlHPDHRNfG94sE/cjMWbCMx6etP+HlAIGwcHCrES+rukkivx5bl7+gLvcSJ49B B0N9x1rOfkuJJ/fzxTvY98ju92L5H8Qg16Iph6WM6qoHfDSdIs1WZ/i2OgUpz+RIN/3UH5cCnzNQ yxHhxJ8C4+C8QMCKOxw= )`
	`fdicig.gov. 900 IN RRSIG ( A 8 2 900 20220201042251 20220128032941 55281 fdicig.gov. I2C3aTOaGOVnj7zuB4mz35QKjdWGK1NdXLWzzf38+67YXV6EGsE7+Ell+/GFxi7fQnkvrovJ7D8v YC3Ir4/KYrrGv1Pu9lD++n7OoVD19gZq7NvZ04CBzTJJXfqp0POmSUnAjDh/hfrt941Lgcu7s6uv xl88QSAT0OpuOuHyVbM= )`
	RRSIG=31650 and DNSKEY=31650 verifies the A RRset
	RRSIG=55281 and DNSKEY=55281 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fdicig.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: