DNSSEC Debugger - fhfa.gov

Domain Name:

Time: 2024-09-11 03:22:44 UTC

Analyzing DNSSEC problems for fhfa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 24742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to k.root-servers.net for fhfa.gov/A
	Received 615 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 615 octets ;; HEADER SECTION ;; id = 62030 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 610 octets ;; HEADER SECTION ;; id = 50761 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 52966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 42615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241106110532 20240906110532 2536 gov. 3ItZq78WJ+YaUtZumcjIK7u6ZY86wZH+NNkPI3xuJZE0mUGAPbVtzYlp3JKf8u9Icd/MEqHD9F8V aEILjah2qQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241106110532 20240906110532 2536 gov. 3ItZq78WJ+YaUtZumcjIK7u6ZY86wZH+NNkPI3xuJZE0mUGAPbVtzYlp3JKf8u9Icd/MEqHD9F8V aEILjah2qQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for fhfa.gov/A
	Received 324 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 324 octets ;; HEADER SECTION ;; id = 6978 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fhfa.gov. 10800 IN NS ns01.fhfa.gov. fhfa.gov. 10800 IN NS ns02.fhfa.gov. fhfa.gov. 10800 IN NS ns03.fhfa.gov. fhfa.gov. 10800 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN DS ( 10999 8 2 10b17aa84e5d679bbd07cc9404f3e4386774df9052328565b076e88b45530761 ) fhfa.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912042244 20240910022244 35496 gov. Clzc0Wf0bhNsbIc09I83lI7KnA8FrMDcB1bRbCOtQyqp55wCKkEAjKAQcMbcGuToHaYgcbQ4/Sq6 SOGukhZKkA== ) ;; ADDITIONAL SECTION (5 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for fhfa.gov/DNSKEY
	Received 324 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 324 octets ;; HEADER SECTION ;; id = 38350 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fhfa.gov. 10800 IN NS ns01.fhfa.gov. fhfa.gov. 10800 IN NS ns02.fhfa.gov. fhfa.gov. 10800 IN NS ns03.fhfa.gov. fhfa.gov. 10800 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN DS ( 10999 8 2 10b17aa84e5d679bbd07cc9404f3e4386774df9052328565b076e88b45530761 ) fhfa.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912042244 20240910022244 35496 gov. PHWwWBkLI9zblt6bUPQOFKga7+GsvgZw69xfi5yGt+2skxauZI5UDunh0BTuaaFVxqcVr4d5vNKP CDlhGseKIg== ) ;; ADDITIONAL SECTION (5 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ;; { "EDNS-VERSION": 0 }
	Found child zone fhfa.gov

fhfa.gov

	Checking DS between gov and fhfa.gov
	Query to a.ns.gov for fhfa.gov/DS
	Received 184 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 184 octets ;; HEADER SECTION ;; id = 21625 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN DS ;; ANSWER SECTION (2 records) fhfa.gov. 3600 IN DS ( 10999 8 2 10b17aa84e5d679bbd07cc9404f3e4386774df9052328565b076e88b45530761 ) fhfa.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912042244 20240910022244 35496 gov. OZs0Vqq3YA/RA/JEL9D+/7BdARNYM/nOPZctoeffnMmMvFEu/Er+QjbIJ0S80wsxvNSEnpyhGT8M H5nnv+xgdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fhfa.gov in the gov zone
	DS=10999/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fhfa.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912042244 20240910022244 35496 gov. OZs0Vqq3YA/RA/JEL9D+/7BdARNYM/nOPZctoeffnMmMvFEu/Er+QjbIJ0S80wsxvNSEnpyhGT8M H5nnv+xgdw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=10999/SHA-256 is now in the chain-of-trust
	`fhfa.gov. 3600 IN DS ( 10999 8 2 10b17aa84e5d679bbd07cc9404f3e4386774df9052328565b076e88b45530761 )`
	Query to ns04.fhfa.gov for fhfa.gov/DNSKEY
	Received 1181 bytes from 35.171.11.110
	;; Response received from [35.171.11.110] 1181 octets ;; HEADER SECTION ;; id = 35802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN DNSKEY ;; ANSWER SECTION (4 records) fhfa.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbJnhExQY2pE5NXKowap0tvllaGlqU3AhHaZ17s1BCiqdVnauAUF5V1IBQwvPFVs12Uoydkf A77Sr4EHJls1pomc93uKYy0r+n6ZmI5uizbjtsSTdbabtgkYniE4nsXRgiFCTPsxeXr5pG+5dxgs DHxtkCoWyHpczDenM+i/RgVet/bvsyM2Wr+IkYXrUs8ragxxf50t5Ih1aAXlGT1raFSpCN0M/9wZ iYVgbaIZfPJ4qHylAHKRmZGPb83r/nopGfrcflJfgvBc3ZZJtwfYqQl07uB7NERizF2U9h9nUglT 3DhRBLHGwKhH/qxYSZJCs7n8ejKmI5kgHCn+N9sD3Jc= ) ; Key ID = 34713 fhfa.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAesDy2U4vM0sS0q4FktIkHKs238ZJiGadTl0jtOJHJieXPLdx6h91WdadsR0ewL6cuGkx4uD +ez+VzBuL/LSayEY7mNhKsuBik1vx6/K/kW9D9/UhD20R9nCE0CytyvZdHRImQQnrm3oKkTdG4/9 ys2mRYO/wrnb/TEfZ5YrGT+HSTirmChGk6lVKWZSWZFic5ToBERqDhzXC/lj7NEoqIgjbAuiVJnX cQw1DWXbzEvMUOGUciBJ/wFdlrkKdAqupXs0dmPVcEwteG3sRTcAB8thcjQZyQKez112w+9ajUE8 vxGUALslspXqMdLTedGv34Zz2V/WNVSqM4aDOpy/B1U= ) ; Key ID = 10999 fhfa.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20241009060301 20240909060301 10999 fhfa.gov. luzvHb9VZXQlUWM42YxvW3N40kmgbWLli9Ng07xtI7yrm20LBO42WLIdKpyLiTLyOiFhwcOWgNmc hJ85NICjol3O/rk2Yb/946OVWRjAv44s9WuAMlEqbgpxxmTiy4DHBlqo2GJIjmvtGo/ik7nhOgvG hGerv8iBXW+uB5YWPAkNA4XYT4DHluWUkd3uvq2XXGWI2NMJwOoF4broW/VpK0WkCltLyTghXsaW SPMX6tZFlh8n0psuprPWKwHlfb53T2MtKOasLPVySlNBrl9v7bbwvpXQj7TYsiVV3rQLlBu3v8d1 xZ5fbmlgx15uRZSvfGVFIajtQin3s72XCkqDEg== ) fhfa.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. O83Q6Mv703L6+H4nPFwgAiGzAs1lAT/reVGBbZegKF+IRdS2IvmZnx/ivg0p6cVeErGjzNYyRiUx Faabc9v+WQqS473YXR7B5XFkJegRfyn/WDJdxUJzIMkuEzqfUP7V040zfkxTKhT7SCeOkdHoAD05 +BEY3A6fUKJmppTdFC7sYsTlazWkiK7KNHlwsskxw04bOkRrfZhje0Q7zE8fUuGkxnDu+JiXrNVY iOU+gA3nZAYUUiIyjqVpXOey+ATTXNBBwmKwJprPMdNu9o7RGpQixnhfb77PLptSTeJxdU/ryd/T 9hOrl9ULSQC69DX/kjbWUriy0FRAaNju2Q0y9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for fhfa.gov
	`fhfa.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbJnhExQY2pE5NXKowap0tvllaGlqU3AhHaZ17s1BCiqdVnauAUF5V1IBQwvPFVs12Uoydkf A77Sr4EHJls1pomc93uKYy0r+n6ZmI5uizbjtsSTdbabtgkYniE4nsXRgiFCTPsxeXr5pG+5dxgs DHxtkCoWyHpczDenM+i/RgVet/bvsyM2Wr+IkYXrUs8ragxxf50t5Ih1aAXlGT1raFSpCN0M/9wZ iYVgbaIZfPJ4qHylAHKRmZGPb83r/nopGfrcflJfgvBc3ZZJtwfYqQl07uB7NERizF2U9h9nUglT 3DhRBLHGwKhH/qxYSZJCs7n8ejKmI5kgHCn+N9sD3Jc= ) ; Key ID = 34713`
	`fhfa.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAesDy2U4vM0sS0q4FktIkHKs238ZJiGadTl0jtOJHJieXPLdx6h91WdadsR0ewL6cuGkx4uD +ez+VzBuL/LSayEY7mNhKsuBik1vx6/K/kW9D9/UhD20R9nCE0CytyvZdHRImQQnrm3oKkTdG4/9 ys2mRYO/wrnb/TEfZ5YrGT+HSTirmChGk6lVKWZSWZFic5ToBERqDhzXC/lj7NEoqIgjbAuiVJnX cQw1DWXbzEvMUOGUciBJ/wFdlrkKdAqupXs0dmPVcEwteG3sRTcAB8thcjQZyQKez112w+9ajUE8 vxGUALslspXqMdLTedGv34Zz2V/WNVSqM4aDOpy/B1U= ) ; Key ID = 10999`
	DNSKEY=10999/SEP is now in the chain-of-trust
	DS=10999/SHA-256 verifies DNSKEY=10999/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`fhfa.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20241009060301 20240909060301 10999 fhfa.gov. luzvHb9VZXQlUWM42YxvW3N40kmgbWLli9Ng07xtI7yrm20LBO42WLIdKpyLiTLyOiFhwcOWgNmc hJ85NICjol3O/rk2Yb/946OVWRjAv44s9WuAMlEqbgpxxmTiy4DHBlqo2GJIjmvtGo/ik7nhOgvG hGerv8iBXW+uB5YWPAkNA4XYT4DHluWUkd3uvq2XXGWI2NMJwOoF4broW/VpK0WkCltLyTghXsaW SPMX6tZFlh8n0psuprPWKwHlfb53T2MtKOasLPVySlNBrl9v7bbwvpXQj7TYsiVV3rQLlBu3v8d1 xZ5fbmlgx15uRZSvfGVFIajtQin3s72XCkqDEg== )`
	`fhfa.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. O83Q6Mv703L6+H4nPFwgAiGzAs1lAT/reVGBbZegKF+IRdS2IvmZnx/ivg0p6cVeErGjzNYyRiUx Faabc9v+WQqS473YXR7B5XFkJegRfyn/WDJdxUJzIMkuEzqfUP7V040zfkxTKhT7SCeOkdHoAD05 +BEY3A6fUKJmppTdFC7sYsTlazWkiK7KNHlwsskxw04bOkRrfZhje0Q7zE8fUuGkxnDu+JiXrNVY iOU+gA3nZAYUUiIyjqVpXOey+ATTXNBBwmKwJprPMdNu9o7RGpQixnhfb77PLptSTeJxdU/ryd/T 9hOrl9ULSQC69DX/kjbWUriy0FRAaNju2Q0y9w== )`
	RRSIG=10999 and DNSKEY=10999/SEP verifies the DNSKEY RRset
	RRSIG=34713 and DNSKEY=34713 verifies the DNSKEY RRset
	DNSKEY=34713 is now in the chain-of-trust
	Query to ns02.fhfa.gov for fhfa.gov/A
	Received 1081 bytes from 12.183.70.5
	;; Response received from [12.183.70.5] 1081 octets ;; HEADER SECTION ;; id = 50628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	ns02.fhfa.gov is authoritative for fhfa.gov
	Found RRSIG signed by fhfa.gov zone
	Query to ns04.fhfa.gov for fhfa.gov/SOA
	Received 1110 bytes from 35.171.11.110
	;; Response received from [35.171.11.110] 1110 octets ;; HEADER SECTION ;; id = 44796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN SOA ;; ANSWER SECTION (2 records) fhfa.gov. 3600 IN SOA ( ns01.fhfa.gov. dnsadmin.fhfa.gov. 2024090900 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) fhfa.gov. 3600 IN RRSIG ( SOA 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. a94bNJtSg+OrEo6WjW79C0mfCSgG+WkivI/DR3lm4IG1vyyKc4GAYP6m74G0x50Nclcz+ajTmKmh 1idDI0HVzgAVM2wOYLLiTf6b7178SRflDrqCcDne5j8L9X3enIo1XXOA8RkkhE7XuYTHauizWV9k 7rsKQujcttmesCYn/5O3o/jEUxk/+to0/UMz1z/2e/ok2AR13dbklZHmiP/1u5GeisE0dZr3/dje aNxqvveHJLkWFpvLS3KMhye1sRM9/voCYJgPsrWgc2BklhbannOL0HtHw4mL0tyuHIiRsFcLoXfm fl2S6H1uc2BH7MjlG1lOLETsC7KyfPij5tmRIg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns01.fhfa.gov for fhfa.gov/SOA
	Received 1110 bytes from 12.183.70.4
	;; Response received from [12.183.70.4] 1110 octets ;; HEADER SECTION ;; id = 10132 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN SOA ;; ANSWER SECTION (2 records) fhfa.gov. 3600 IN SOA ( ns01.fhfa.gov. dnsadmin.fhfa.gov. 2024090900 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) fhfa.gov. 3600 IN RRSIG ( SOA 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. a94bNJtSg+OrEo6WjW79C0mfCSgG+WkivI/DR3lm4IG1vyyKc4GAYP6m74G0x50Nclcz+ajTmKmh 1idDI0HVzgAVM2wOYLLiTf6b7178SRflDrqCcDne5j8L9X3enIo1XXOA8RkkhE7XuYTHauizWV9k 7rsKQujcttmesCYn/5O3o/jEUxk/+to0/UMz1z/2e/ok2AR13dbklZHmiP/1u5GeisE0dZr3/dje aNxqvveHJLkWFpvLS3KMhye1sRM9/voCYJgPsrWgc2BklhbannOL0HtHw4mL0tyuHIiRsFcLoXfm fl2S6H1uc2BH7MjlG1lOLETsC7KyfPij5tmRIg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns03.fhfa.gov for fhfa.gov/SOA
	Received 1110 bytes from 12.183.69.4
	;; Response received from [12.183.69.4] 1110 octets ;; HEADER SECTION ;; id = 49656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN SOA ;; ANSWER SECTION (2 records) fhfa.gov. 3600 IN SOA ( ns01.fhfa.gov. dnsadmin.fhfa.gov. 2024090900 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) fhfa.gov. 3600 IN RRSIG ( SOA 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. a94bNJtSg+OrEo6WjW79C0mfCSgG+WkivI/DR3lm4IG1vyyKc4GAYP6m74G0x50Nclcz+ajTmKmh 1idDI0HVzgAVM2wOYLLiTf6b7178SRflDrqCcDne5j8L9X3enIo1XXOA8RkkhE7XuYTHauizWV9k 7rsKQujcttmesCYn/5O3o/jEUxk/+to0/UMz1z/2e/ok2AR13dbklZHmiP/1u5GeisE0dZr3/dje aNxqvveHJLkWFpvLS3KMhye1sRM9/voCYJgPsrWgc2BklhbannOL0HtHw4mL0tyuHIiRsFcLoXfm fl2S6H1uc2BH7MjlG1lOLETsC7KyfPij5tmRIg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns02.fhfa.gov for fhfa.gov/A
	Received 1081 bytes from 12.183.70.5
	;; Response received from [12.183.70.5] 1081 octets ;; HEADER SECTION ;; id = 39784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	fhfa.gov A RR has value 54.92.167.213
	Found 1 RRSIGs over A RRset
	`fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== )`
	RRSIG=34713 and DNSKEY=34713 verifies the A RRset

fhfa.gov

	Query to ns03.fhfa.gov for fhfa.gov/A
	Received 1081 bytes from 12.183.69.4
	;; Response received from [12.183.69.4] 1081 octets ;; HEADER SECTION ;; id = 65039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	ns03.fhfa.gov is authoritative for fhfa.gov
	Found RRSIG signed by fhfa.gov zone
	Query to ns03.fhfa.gov for fhfa.gov/A
	Received 1081 bytes from 12.183.69.4
	;; Response received from [12.183.69.4] 1081 octets ;; HEADER SECTION ;; id = 29415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	fhfa.gov A RR has value 54.92.167.213
	Found 1 RRSIGs over A RRset
	`fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== )`
	RRSIG=34713 and DNSKEY=34713 verifies the A RRset

fhfa.gov

	Query to ns01.fhfa.gov for fhfa.gov/A
	Received 1081 bytes from 12.183.70.4
	;; Response received from [12.183.70.4] 1081 octets ;; HEADER SECTION ;; id = 47043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	ns01.fhfa.gov is authoritative for fhfa.gov
	Found RRSIG signed by fhfa.gov zone
	Query to ns01.fhfa.gov for fhfa.gov/A
	Received 1081 bytes from 12.183.70.4
	;; Response received from [12.183.70.4] 1081 octets ;; HEADER SECTION ;; id = 42925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	fhfa.gov A RR has value 54.92.167.213
	Found 1 RRSIGs over A RRset
	`fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== )`
	RRSIG=34713 and DNSKEY=34713 verifies the A RRset

fhfa.gov

	Query to ns04.fhfa.gov for fhfa.gov/A
	Received 1081 bytes from 35.171.11.110
	;; Response received from [35.171.11.110] 1081 octets ;; HEADER SECTION ;; id = 32097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	ns04.fhfa.gov is authoritative for fhfa.gov
	Found RRSIG signed by fhfa.gov zone
	Query to ns04.fhfa.gov for fhfa.gov/A
	Received 1081 bytes from 35.171.11.110
	;; Response received from [35.171.11.110] 1081 octets ;; HEADER SECTION ;; id = 56820 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fhfa.gov. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20241009060301 20240909060301 34713 fhfa.gov. Dwk4ZZx7TvFVILDupy2eFdhwyfHFz2VpdArIZ5d/f3pf4/58Jsn3AnfW07iCdp2c2331UMPZIuiM w0cVq7/vq9626uXV6RFJnJjr2VGS5rUGH9pSyifqt1QNutKBlLShtjA4JStquovLZlNIz5rj9Q7E Ja1/FeR6QhyoMajeVVmSZYDal9oC0OKhbDiJDB2iCSU+6ek3DTDL+qBfW7wc9gHfc4eN7R8//Y6B JAvRERx1i72x/BjkhbjmyyprljBjiWPxegz16FJZhk8XnsuHlcmWXWopl7FPAQl2dNZr1Id+0eqk hZiKOLwZQQEl9CKI+o3QNgi5UcdSSz2ZbsqmaQ== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20241009060301 20240909060301 34713 fhfa.gov. KjNNG2z1IvpL/O6G9QzxweYMRmQSB01YwJegzatFNEjFjLV9U8ExGhQYL0s+QusuxOMMZsRtzLp8 QKtaQs/H7HCC5na0DyaibbdGHub+a2Jfr43fio+OeTn1Jica5grwiDw/HtJywlUfetluanxDiw+1 qkRctRUW5XDA5FSGVLAPmT27L2PDBRYYGXT66lVEq6imNZ+u4F0OwSSBl3gkTL+dKN1MFd4ZISsI O/kOkys0nX3BWSmYY5ve8LbGxWvVURlmiGukkk4v2HgJqy/fYofpskF59RsFQSj/PKB6oezHDw+G EZQPbH/uj9O9DLbGb7lOukitSeWq04DT2j7oQg== ) ;; { "EDNS-VERSION": 0 }
	fhfa.gov A RR has value 54.92.167.213
	Found 1 RRSIGs over A RRset
	`fhfa.gov. 60 IN RRSIG ( A 8 2 60 20241009060301 20240909060301 34713 fhfa.gov. I+DkPjmvvymKrjesmwOZWzCUCtmOSJKRGfbSMqC8Z1FGYY+yPKDB9T5G5b/mmUCcnywOVJD5+u7r 7FSlBxABJeAZEzNaGWHCYoFMPCb+34ranlomvHrpfCIlz8UPpUhqNLEyLg34n2ibzztqbMFUMAFw YtGygmcxhimvRnTP2+zzGPNZbMRHu7pf0CYEoqRyaTYGQC71CP4yWvj7Uawxva23303NKZFSspoP jcaoDfRZqI1DTs2A3KBg8dm/5iZvlYT1rUs3ODtWXbNsWnvIc1yXT3kIuCTdirvlW1cZyXkTo5RR syHuNSPLj74Pw/O9H69e9S3/LUizRFdzYp7Weg== )`
	RRSIG=34713 and DNSKEY=34713 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fhfa.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: