DNSSEC Analyzer - fnal.gov

Domain Name:

Time: 2022-01-28 20:15:08 UTC, NTP stratum 16

Analyzing DNSSEC problems for fnal.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (864 octets) ;; HEADER SECTION ;; id = 21316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to e.root-servers.net for fnal.gov/A
	Received 627 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (627 octets) ;; HEADER SECTION ;; id = 61073 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . Ih8bTLLklq7Sd3Cx2PQDVQnizQeeoEakJKbCtH3BS8dHXAe3RyskvHq4SmEBcUBC8yLLiY57Q0QK 2e/VTax5czwdF0hkpvr4Nz1FkIm2Tw0eV5vz0BoudhnDtNiJqdE7ckHXdHrLEls8VcXab1lM6MNq K+sCpY3kg+KsfawHwQos+CHvDPLryviytuxKnZTI2rY4bRtGwhUZWI0twFfCFDNBnnXHQkpUiHcj sE25STT7wRwV6xRnziAJ6E8cXVuc1gkaWyCJauxC/OdEVH3xbKQeH+Kw0bUmPiKRhxw+A5koq2Qs LT3pibI7LiA63YwOSVl/u1qrMVImKRQ4+Yb2Cg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to b.root-servers.net for gov/DNSKEY
	Received 622 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (622 octets) ;; HEADER SECTION ;; id = 28784 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . Ih8bTLLklq7Sd3Cx2PQDVQnizQeeoEakJKbCtH3BS8dHXAe3RyskvHq4SmEBcUBC8yLLiY57Q0QK 2e/VTax5czwdF0hkpvr4Nz1FkIm2Tw0eV5vz0BoudhnDtNiJqdE7ckHXdHrLEls8VcXab1lM6MNq K+sCpY3kg+KsfawHwQos+CHvDPLryviytuxKnZTI2rY4bRtGwhUZWI0twFfCFDNBnnXHQkpUiHcj sE25STT7wRwV6xRnziAJ6E8cXVuc1gkaWyCJauxC/OdEVH3xbKQeH+Kw0bUmPiKRhxw+A5koq2Qs LT3pibI7LiA63YwOSVl/u1qrMVImKRQ4+Yb2Cg== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to b.root-servers.net for gov/DS
	Received 367 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (367 octets) ;; HEADER SECTION ;; id = 62513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . Ih8bTLLklq7Sd3Cx2PQDVQnizQeeoEakJKbCtH3BS8dHXAe3RyskvHq4SmEBcUBC8yLLiY57Q0QK 2e/VTax5czwdF0hkpvr4Nz1FkIm2Tw0eV5vz0BoudhnDtNiJqdE7ckHXdHrLEls8VcXab1lM6MNq K+sCpY3kg+KsfawHwQos+CHvDPLryviytuxKnZTI2rY4bRtGwhUZWI0twFfCFDNBnnXHQkpUiHcj sE25STT7wRwV6xRnziAJ6E8cXVuc1gkaWyCJauxC/OdEVH3xbKQeH+Kw0bUmPiKRhxw+A5koq2Qs LT3pibI7LiA63YwOSVl/u1qrMVImKRQ4+Yb2Cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . Ih8bTLLklq7Sd3Cx2PQDVQnizQeeoEakJKbCtH3BS8dHXAe3RyskvHq4SmEBcUBC8yLLiY57Q0QK 2e/VTax5czwdF0hkpvr4Nz1FkIm2Tw0eV5vz0BoudhnDtNiJqdE7ckHXdHrLEls8VcXab1lM6MNq K+sCpY3kg+KsfawHwQos+CHvDPLryviytuxKnZTI2rY4bRtGwhUZWI0twFfCFDNBnnXHQkpUiHcj sE25STT7wRwV6xRnziAJ6E8cXVuc1gkaWyCJauxC/OdEVH3xbKQeH+Kw0bUmPiKRhxw+A5koq2Qs LT3pibI7LiA63YwOSVl/u1qrMVImKRQ4+Yb2Cg== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (777 octets) ;; HEADER SECTION ;; id = 21160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcrxKCBVgdzZoceapYfTSdA4A/hRgr01fMqkfcWXPOlSzVxUCJJL/k5ZhtOzmrzpO4RAI+yz DhlVtXF+aXJK1UGIrPT1FCrF5fMup0TBnPCYATjz0BIn+jzCLRyxljwUw11AMYvzYLdF+O0YxbzE XOM+oydCOTbJRWZKKXtG80bZvRwcaa3tqyaPJoNrAaQAQojLHiMrtOmEdjIb2TTx95s= ) ; Key ID = 7030 gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220203200254 20220119195754 7698 gov. krNKH8YoFOOvIraLx75fDnwyRV1mFV0P3N46gcG5rKurxZzjK+zZx+YWwNDjvnSss3ju//rZXJQF SznBdg/q00S7YItRCOkVniNy26aVhZqeoywyrkBCVEo4hjOiRn87Mmj3p9pbM45FZib72itC7MCc jbx/dOKC0C4OQTNDXjqE+5zdx84CVPKwVE81gxl3UQfX27FcOUkdCQScD7dQyQbUkb23s1ephHWQ p4mLmyR0yo601uP05Apo7Gxr8vTcx9BcNQdbvj3X6tzpx330kkPcLSbQcEhxqDbqXQzxa7UwCcUr ZjoT7fAetOTRunxwG61xWtMtRC4KlhLlEYaYiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcrxKCBVgdzZoceapYfTSdA4A/hRgr01fMqkfcWXPOlSzVxUCJJL/k5ZhtOzmrzpO4RAI+yz DhlVtXF+aXJK1UGIrPT1FCrF5fMup0TBnPCYATjz0BIn+jzCLRyxljwUw11AMYvzYLdF+O0YxbzE XOM+oydCOTbJRWZKKXtG80bZvRwcaa3tqyaPJoNrAaQAQojLHiMrtOmEdjIb2TTx95s= ) ; Key ID = 7030`
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220203200254 20220119195754 7698 gov. krNKH8YoFOOvIraLx75fDnwyRV1mFV0P3N46gcG5rKurxZzjK+zZx+YWwNDjvnSss3ju//rZXJQF SznBdg/q00S7YItRCOkVniNy26aVhZqeoywyrkBCVEo4hjOiRn87Mmj3p9pbM45FZib72itC7MCc jbx/dOKC0C4OQTNDXjqE+5zdx84CVPKwVE81gxl3UQfX27FcOUkdCQScD7dQyQbUkb23s1ephHWQ p4mLmyR0yo601uP05Apo7Gxr8vTcx9BcNQdbvj3X6tzpx330kkPcLSbQcEhxqDbqXQzxa7UwCcUr ZjoT7fAetOTRunxwG61xWtMtRC4KlhLlEYaYiA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7030 is now in the chain-of-trust
	Query to c.gov-servers.net for fnal.gov/A
	Received 570 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (570 octets) ;; HEADER SECTION ;; id = 25938 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) fnal.gov. 86400 IN NS ns1.fnal.gov. fnal.gov. 86400 IN NS adns1.es.net. fnal.gov. 86400 IN NS ns2.fnal.gov. fnal.gov. 86400 IN NS adns2.es.net. fnal.gov. 3600 IN DS ( 25125 7 2 a76c30444555e5d7816bc8b55ea8bebc1ebb538147d7a73ea6fc724040e3d9e0 ) fnal.gov. 3600 IN DS ( 46674 7 2 ff9e92607c279ac3b618d80533a8f85f173293e649af809f361f1803ce0464b6 ) fnal.gov. 3600 IN DS 46674 7 1 e14e1c088eaf2f2d0bdd8f2ef1514fdc9dad5c72 fnal.gov. 3600 IN DS 25125 7 1 d6fe10c09fe4d19fe0cd68137b7f6114f5fd9aac fnal.gov. 3600 IN RRSIG ( DS 8 2 3600 20220202024202 20220126024202 7030 gov. rIyxtfVS1kKn1r6s1OcT0XjfrXGgRCSXHMpnPhl0VpiHHfDybv4D8PBK1/SbaxHJmfBNuIeNwPjl HooYGisSpZZ8UWEDZRrWA7QAk8D3h3mxK26xLCp5R1GzGmKtukOYlK8WoKqH/Y7N1QC/cvyKs9a0 uppHhOHtNANuRBg/zDKZGRqin5XYuGZftumOD2s7IdzcUMZm5HAnDMzn40Zagg== ) ;; ADDITIONAL SECTION (5 records) ns1.fnal.gov. 86400 IN A 198.49.208.71 ns1.fnal.gov. 86400 IN AAAA 2620:6a:0:1203::208:71 ns2.fnal.gov. 86400 IN A 198.49.208.70 ns2.fnal.gov. 86400 IN AAAA 2620:6a:0:1203::208:70 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for fnal.gov/DNSKEY
	Received 570 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (570 octets) ;; HEADER SECTION ;; id = 9658 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) fnal.gov. 86400 IN NS ns1.fnal.gov. fnal.gov. 86400 IN NS adns1.es.net. fnal.gov. 86400 IN NS ns2.fnal.gov. fnal.gov. 86400 IN NS adns2.es.net. fnal.gov. 3600 IN DS ( 25125 7 2 a76c30444555e5d7816bc8b55ea8bebc1ebb538147d7a73ea6fc724040e3d9e0 ) fnal.gov. 3600 IN DS ( 46674 7 2 ff9e92607c279ac3b618d80533a8f85f173293e649af809f361f1803ce0464b6 ) fnal.gov. 3600 IN DS 46674 7 1 e14e1c088eaf2f2d0bdd8f2ef1514fdc9dad5c72 fnal.gov. 3600 IN DS 25125 7 1 d6fe10c09fe4d19fe0cd68137b7f6114f5fd9aac fnal.gov. 3600 IN RRSIG ( DS 8 2 3600 20220202024202 20220126024202 7030 gov. rIyxtfVS1kKn1r6s1OcT0XjfrXGgRCSXHMpnPhl0VpiHHfDybv4D8PBK1/SbaxHJmfBNuIeNwPjl HooYGisSpZZ8UWEDZRrWA7QAk8D3h3mxK26xLCp5R1GzGmKtukOYlK8WoKqH/Y7N1QC/cvyKs9a0 uppHhOHtNANuRBg/zDKZGRqin5XYuGZftumOD2s7IdzcUMZm5HAnDMzn40Zagg== ) ;; ADDITIONAL SECTION (5 records) ns1.fnal.gov. 86400 IN A 198.49.208.71 ns1.fnal.gov. 86400 IN AAAA 2620:6a:0:1203::208:71 ns2.fnal.gov. 86400 IN A 198.49.208.70 ns2.fnal.gov. 86400 IN AAAA 2620:6a:0:1203::208:70 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone fnal.gov

fnal.gov

	Checking DS between gov and fnal.gov
	Query to a.gov-servers.net for fnal.gov/DS
	Received 400 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (400 octets) ;; HEADER SECTION ;; id = 10643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN DS ;; ANSWER SECTION (5 records) fnal.gov. 3600 IN DS ( 25125 7 2 a76c30444555e5d7816bc8b55ea8bebc1ebb538147d7a73ea6fc724040e3d9e0 ) fnal.gov. 3600 IN DS ( 46674 7 2 ff9e92607c279ac3b618d80533a8f85f173293e649af809f361f1803ce0464b6 ) fnal.gov. 3600 IN DS 46674 7 1 e14e1c088eaf2f2d0bdd8f2ef1514fdc9dad5c72 fnal.gov. 3600 IN DS 25125 7 1 d6fe10c09fe4d19fe0cd68137b7f6114f5fd9aac fnal.gov. 3600 IN RRSIG ( DS 8 2 3600 20220202024202 20220126024202 7030 gov. rIyxtfVS1kKn1r6s1OcT0XjfrXGgRCSXHMpnPhl0VpiHHfDybv4D8PBK1/SbaxHJmfBNuIeNwPjl HooYGisSpZZ8UWEDZRrWA7QAk8D3h3mxK26xLCp5R1GzGmKtukOYlK8WoKqH/Y7N1QC/cvyKs9a0 uppHhOHtNANuRBg/zDKZGRqin5XYuGZftumOD2s7IdzcUMZm5HAnDMzn40Zagg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for fnal.gov in the gov zone
	DS=25125/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=46674/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=46674/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=25125/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`fnal.gov. 3600 IN RRSIG ( DS 8 2 3600 20220202024202 20220126024202 7030 gov. rIyxtfVS1kKn1r6s1OcT0XjfrXGgRCSXHMpnPhl0VpiHHfDybv4D8PBK1/SbaxHJmfBNuIeNwPjl HooYGisSpZZ8UWEDZRrWA7QAk8D3h3mxK26xLCp5R1GzGmKtukOYlK8WoKqH/Y7N1QC/cvyKs9a0 uppHhOHtNANuRBg/zDKZGRqin5XYuGZftumOD2s7IdzcUMZm5HAnDMzn40Zagg== )`
	RRSIG=7030 and DNSKEY=7030 verifies the DS RRset
	DS=25125/SHA-256 is now in the chain-of-trust
	DS=46674/SHA-256 is now in the chain-of-trust
	`fnal.gov. 3600 IN DS ( 25125 7 2 a76c30444555e5d7816bc8b55ea8bebc1ebb538147d7a73ea6fc724040e3d9e0 )`
	`fnal.gov. 3600 IN DS ( 46674 7 2 ff9e92607c279ac3b618d80533a8f85f173293e649af809f361f1803ce0464b6 )`
	`fnal.gov. 3600 IN DS 46674 7 1 e14e1c088eaf2f2d0bdd8f2ef1514fdc9dad5c72`
	`fnal.gov. 3600 IN DS 25125 7 1 d6fe10c09fe4d19fe0cd68137b7f6114f5fd9aac`
	Query to adns1.es.net for fnal.gov/DNSKEY
	Received 1813 bytes from 192.188.22.22
	;; Response received from 192.188.22.22 (1813 octets) ;; HEADER SECTION ;; id = 51604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN DNSKEY ;; ANSWER SECTION (8 records) fnal.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAb0XzUcwSaG3c71cUbIfKHe0xy4dHfs6MjA2U3wsEPFiz02wKjEGgBtt+EIM8/ppK/6hC1sN ycl5RTCQIZ18i27E+AsEou3xpy+zcw8/GqqJBlXH9paXm+bB9kA0Pa/Jf4ekOO+7K6Zh0duysnrl uJUY1G6TtOP9S4EusLUT6CL7Qy+q+IcU1aip/6cqScOGwsqr7e01DzNXr7ySiwkUelY+sYkGN8Te HxVCrfS9o6yeTkZyadLKNT/kItAhwttNyo90JxvCx3LNsRR7LJXkjO60nYJp/smg044arQCbJP2X NjjK5jmf0YfZ4sutoTjbpMdc0LgRhqJHLIFTo/IxJE8= ) ; Key ID = 25125 fnal.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAb+W9N8J2VpFSanRzppHGH6JbI0RRdGbwJjKLxLa/5j9fFgnlIyARK1sDXas2xPw8C7VJ7B3 aF97FX0WekVE4ypPUyhhvDURl5ZDbxHcgPJoTZ3M1oh+DPCxZuEuO9HqWBSbHqrghVq9UA1jyT2W YpctimvE+YJAc3ghtyO2otNtixFRZrcGYmJfk7ZdYWX2idsJe+t1Be4YjMxA6TZM79Fm9ozL8lZu GkX41A1ExYbKWwQHTzzxXPdglD8dPEHZ2fXQbZGhyBclS7YV7XYSUjb1XLIsTXWSDkLjDHpJ2jDS T6c4b/wAZsc/kahJk8jKtTeNClGOmFmnvxlg6wjkBEs= ) ; Key ID = 46674 fnal.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAbmjPMFzoHi+QBzh200dLZeOUJG/QITbqU0+S62/QoCQe1UV9hVHQXUiI1MGklfLHiO0keH6 6IWXNPFg37o4MV1KiPhQ9xqhHoU9h7BJE+EgPdMh4jDIZhEWcbvOwwuGZ1UWzh/yKoUcf4l6PCje SIdZkafxNZ3iqAP4Iy/Lvn0n ) ; Key ID = 49553 fnal.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAdy7Va/V/RptU8K06ysEHRculspmve2KgrRSaOXwCymv5AoRIOk4LhsVHUVxPTZeV/YTHQW5 bkUpCG30i8zphar+42mHTnIFxNk0sNgRUzYsGeiKQqwMopE+GHTp4/PtnHQWMn92cAHDnPqSgzYq SsfcvKawGnZeZzGnAdeZ2mBR ) ; Key ID = 21914 fnal.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220201000316 20220127231507 21914 fnal.gov. wXQVR4MYfeYPX5PMYZV6Pplwjh270bzBY4IsUz5yQWzFw8sDfQrqG/HIjMYKRnkxdOgPYu5U0Gjy 79KZCIup7ec6iJJDEWNDSXAzEqm2PaYdgXFnP/z0bfJ+m6cZKbM3o1cP5yD6hQo62gHydiZ+ElWO qZIgh9Ih536K8Rv0Wy4= ) fnal.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220201000316 20220127231507 25125 fnal.gov. c2BzR5afNvM0P2LLcGlo2FmGbVgBIz9D2wz6ivWxb4uMg5oEcHGxKbQVzYhPxuQb8XlHkjT2DqE2 PyMd9mcrL9czl0dcXYYRZKUZI43gbkRZCDBtMx7rEj48kmue4MSQXjV9Tbz2CleI1YlC9YoZu63W ygAzYac0zYlCAoj3kR/4IugnVC1cpgOzgXxjeApk+EEf5c0AITjrlm6IFeSVvnhGh4NB+nWUSnuk tlD1ZOeMpDrCGDeHHqH2YZpafoRnREfCRTnN4nP9b5fbTxVnzSWE1Hdyu9fos70OM3ZTUPP74gJz ThSPITbhHQ3iIaZxHXMuxljeM5SlwwE5dCmzfw== ) fnal.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220201000316 20220127231507 46674 fnal.gov. BfM0DQ4PMG+7NoD1vM2JHLIDIDqFqjZmsMCe3hg3iwsLhFKU/AsXNMdQK86eQB4kvTj43O38sA1N m36KKvcs21R3ny7BgBDCXHnZeHs/dXQrci6euR9cM+Z3fT3nsEnx8dL/r0g2vugJyqumRnvEMp3d GMPAi2Yur5nhgcej/VzrHDe6TO+UV/Ivtdvr5MQaeNGLZJ3Lv6w1HbkDQONd1XW1heW6JDG5wqGT qAvX4vqj94zv9A+vt7sk99nPLBnWo9LsqvzzgZ6nDwc+5TAfq1eYuLwsDMOoOI+fBrKe2Ce6sD7E 7QDJ+A/rCtzcHKSNond6wsd7BEs5twnr1cEgLA== ) fnal.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220201000316 20220127231507 49553 fnal.gov. jstsM71u3Lz7dQ0aclDt5WvbL3lRvriLJlxmPiiW1t0CGyT8vm6lsxmJEaO5fskZvE39uqzfpGbB VB3sy6zPvX9HRvrfyWFLaOfCQf66kxn07nmGpyo7aMU35/ZhpWBFBkVGAHz+vtLTVbq6h1F+pm9L 0lIG/hPZST8e4sIIhdk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 4 DNSKEY records for fnal.gov
	`fnal.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAb0XzUcwSaG3c71cUbIfKHe0xy4dHfs6MjA2U3wsEPFiz02wKjEGgBtt+EIM8/ppK/6hC1sN ycl5RTCQIZ18i27E+AsEou3xpy+zcw8/GqqJBlXH9paXm+bB9kA0Pa/Jf4ekOO+7K6Zh0duysnrl uJUY1G6TtOP9S4EusLUT6CL7Qy+q+IcU1aip/6cqScOGwsqr7e01DzNXr7ySiwkUelY+sYkGN8Te HxVCrfS9o6yeTkZyadLKNT/kItAhwttNyo90JxvCx3LNsRR7LJXkjO60nYJp/smg044arQCbJP2X NjjK5jmf0YfZ4sutoTjbpMdc0LgRhqJHLIFTo/IxJE8= ) ; Key ID = 25125`
	`fnal.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAb+W9N8J2VpFSanRzppHGH6JbI0RRdGbwJjKLxLa/5j9fFgnlIyARK1sDXas2xPw8C7VJ7B3 aF97FX0WekVE4ypPUyhhvDURl5ZDbxHcgPJoTZ3M1oh+DPCxZuEuO9HqWBSbHqrghVq9UA1jyT2W YpctimvE+YJAc3ghtyO2otNtixFRZrcGYmJfk7ZdYWX2idsJe+t1Be4YjMxA6TZM79Fm9ozL8lZu GkX41A1ExYbKWwQHTzzxXPdglD8dPEHZ2fXQbZGhyBclS7YV7XYSUjb1XLIsTXWSDkLjDHpJ2jDS T6c4b/wAZsc/kahJk8jKtTeNClGOmFmnvxlg6wjkBEs= ) ; Key ID = 46674`
	`fnal.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAbmjPMFzoHi+QBzh200dLZeOUJG/QITbqU0+S62/QoCQe1UV9hVHQXUiI1MGklfLHiO0keH6 6IWXNPFg37o4MV1KiPhQ9xqhHoU9h7BJE+EgPdMh4jDIZhEWcbvOwwuGZ1UWzh/yKoUcf4l6PCje SIdZkafxNZ3iqAP4Iy/Lvn0n ) ; Key ID = 49553`
	`fnal.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAdy7Va/V/RptU8K06ysEHRculspmve2KgrRSaOXwCymv5AoRIOk4LhsVHUVxPTZeV/YTHQW5 bkUpCG30i8zphar+42mHTnIFxNk0sNgRUzYsGeiKQqwMopE+GHTp4/PtnHQWMn92cAHDnPqSgzYq SsfcvKawGnZeZzGnAdeZ2mBR ) ; Key ID = 21914`
	DNSKEY=25125/SEP is now in the chain-of-trust
	DS=25125/SHA-256 verifies DNSKEY=25125/SEP
	DS=25125/SHA-1 verifies DNSKEY=25125/SEP
	DNSKEY=46674/SEP is now in the chain-of-trust
	DS=46674/SHA-256 verifies DNSKEY=46674/SEP
	DS=46674/SHA-1 verifies DNSKEY=46674/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`fnal.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220201000316 20220127231507 21914 fnal.gov. wXQVR4MYfeYPX5PMYZV6Pplwjh270bzBY4IsUz5yQWzFw8sDfQrqG/HIjMYKRnkxdOgPYu5U0Gjy 79KZCIup7ec6iJJDEWNDSXAzEqm2PaYdgXFnP/z0bfJ+m6cZKbM3o1cP5yD6hQo62gHydiZ+ElWO qZIgh9Ih536K8Rv0Wy4= )`
	`fnal.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220201000316 20220127231507 25125 fnal.gov. c2BzR5afNvM0P2LLcGlo2FmGbVgBIz9D2wz6ivWxb4uMg5oEcHGxKbQVzYhPxuQb8XlHkjT2DqE2 PyMd9mcrL9czl0dcXYYRZKUZI43gbkRZCDBtMx7rEj48kmue4MSQXjV9Tbz2CleI1YlC9YoZu63W ygAzYac0zYlCAoj3kR/4IugnVC1cpgOzgXxjeApk+EEf5c0AITjrlm6IFeSVvnhGh4NB+nWUSnuk tlD1ZOeMpDrCGDeHHqH2YZpafoRnREfCRTnN4nP9b5fbTxVnzSWE1Hdyu9fos70OM3ZTUPP74gJz ThSPITbhHQ3iIaZxHXMuxljeM5SlwwE5dCmzfw== )`
	`fnal.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220201000316 20220127231507 46674 fnal.gov. BfM0DQ4PMG+7NoD1vM2JHLIDIDqFqjZmsMCe3hg3iwsLhFKU/AsXNMdQK86eQB4kvTj43O38sA1N m36KKvcs21R3ny7BgBDCXHnZeHs/dXQrci6euR9cM+Z3fT3nsEnx8dL/r0g2vugJyqumRnvEMp3d GMPAi2Yur5nhgcej/VzrHDe6TO+UV/Ivtdvr5MQaeNGLZJ3Lv6w1HbkDQONd1XW1heW6JDG5wqGT qAvX4vqj94zv9A+vt7sk99nPLBnWo9LsqvzzgZ6nDwc+5TAfq1eYuLwsDMOoOI+fBrKe2Ce6sD7E 7QDJ+A/rCtzcHKSNond6wsd7BEs5twnr1cEgLA== )`
	`fnal.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20220201000316 20220127231507 49553 fnal.gov. jstsM71u3Lz7dQ0aclDt5WvbL3lRvriLJlxmPiiW1t0CGyT8vm6lsxmJEaO5fskZvE39uqzfpGbB VB3sy6zPvX9HRvrfyWFLaOfCQf66kxn07nmGpyo7aMU35/ZhpWBFBkVGAHz+vtLTVbq6h1F+pm9L 0lIG/hPZST8e4sIIhdk= )`
	RRSIG=21914 and DNSKEY=21914 verifies the DNSKEY RRset
	RRSIG=25125 and DNSKEY=25125/SEP verifies the DNSKEY RRset
	RRSIG=46674 and DNSKEY=46674/SEP verifies the DNSKEY RRset
	RRSIG=49553 and DNSKEY=49553 verifies the DNSKEY RRset
	DNSKEY=49553 is now in the chain-of-trust
	DNSKEY=21914 is now in the chain-of-trust
	Query to adns1.es.net for fnal.gov/A
	Received 389 bytes from 192.188.22.22
	;; Response received from 192.188.22.22 (389 octets) ;; HEADER SECTION ;; id = 5161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN A 131.225.105.239 fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= ) fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns1.es.net is authoritative for fnal.gov
	Found RRSIG signed by fnal.gov zone
	Query to ns1.fnal.gov for fnal.gov/SOA
	Received 424 bytes from 198.49.208.71
	;; Response received from 198.49.208.71 (424 octets) ;; HEADER SECTION ;; id = 33750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN SOA ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN SOA ( ns1.fnal.gov. netmanager.fnal.gov. 2025950066 ;serial 7200 ;refresh 120 ;retry 1209600 ;expire 900 ;minimum ) fnal.gov. 21600 IN RRSIG ( SOA 7 2 21600 20220201201353 20220128191353 21914 fnal.gov. NpWfhXzWdhCWzY03Ka/TG+wEkPcLg1mmYDIFAB2dGWKGb7A0iqwnsC3EieYtrvMDwlFCn9mcB/2Q aHg3RGLnu5dA3KzuGPuBXNWL3GZmlsKNkoYY9HqI5cTmCPQDzJD6GY5q/Y+frFyqrySL6s9DKx0L jSvo1D2PcOITcvThAoY= ) fnal.gov. 21600 IN RRSIG ( SOA 7 2 21600 20220201201353 20220128191353 49553 fnal.gov. MrYUJ+mAd/PpGK8/3xGa3UPgHOvr6uF+YQ2s1QkqXZMpCQZyh3f1iUtfnFIJtO+Iufs/4L5MBBv7 CFokyBMl8ND2IPh5edSMVvEZtmQA+SZilkIvJ8bqn9P0j1ZE8x/LWv5OXQsTPPOKijnImng+xcGs DgGPpzUcCxGzmrBzjKc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to adns2.es.net for fnal.gov/SOA
	Received 926 bytes from 192.188.22.52
	;; Response received from 192.188.22.52 (926 octets) ;; HEADER SECTION ;; id = 16815 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN SOA ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN SOA ( ns1.fnal.gov. netmanager.fnal.gov. 2025950066 ;serial 7200 ;refresh 120 ;retry 1209600 ;expire 900 ;minimum ) fnal.gov. 21600 IN RRSIG ( SOA 7 2 21600 20220201201353 20220128191353 21914 fnal.gov. NpWfhXzWdhCWzY03Ka/TG+wEkPcLg1mmYDIFAB2dGWKGb7A0iqwnsC3EieYtrvMDwlFCn9mcB/2Q aHg3RGLnu5dA3KzuGPuBXNWL3GZmlsKNkoYY9HqI5cTmCPQDzJD6GY5q/Y+frFyqrySL6s9DKx0L jSvo1D2PcOITcvThAoY= ) fnal.gov. 21600 IN RRSIG ( SOA 7 2 21600 20220201201353 20220128191353 49553 fnal.gov. MrYUJ+mAd/PpGK8/3xGa3UPgHOvr6uF+YQ2s1QkqXZMpCQZyh3f1iUtfnFIJtO+Iufs/4L5MBBv7 CFokyBMl8ND2IPh5edSMVvEZtmQA+SZilkIvJ8bqn9P0j1ZE8x/LWv5OXQsTPPOKijnImng+xcGs DgGPpzUcCxGzmrBzjKc= ) ;; AUTHORITY SECTION (6 records) fnal.gov. 21600 IN NS ns2.fnal.gov. fnal.gov. 21600 IN NS adns1.es.net. fnal.gov. 21600 IN NS adns2.es.net. fnal.gov. 21600 IN NS ns1.fnal.gov. fnal.gov. 21600 IN RRSIG ( NS 7 2 21600 20220131233803 20220127231057 21914 fnal.gov. AjltnA+4cRTiGeMHhMfFkM0sXOk2NcjTQQ1Olo1xVxXiIJ46e//8ruU3m71Ms9NTi+/E0xyMJv7S GIzDu66shcsK3ucAeLOZyA8sq8TOIaWTel1Q1ohqQuVwGG+kTyPrgMIsAle2l8ekRo6NAO4MKP7D 6Ath/jKy7EeskuVilE0= ) fnal.gov. 21600 IN RRSIG ( NS 7 2 21600 20220131233803 20220127231057 49553 fnal.gov. p0FXlVkgdFl8zlv4Zt2XCziBRw6ZWPvwX9n86tNWA8XneUpm3gJYtPKNZLXVaqYiWz6mkNe+MQox tAEP4Cxrz+5LBq5tkBorw6TNmc+T/AMksECnV7pb825BcrMajbX+0VGeh4jaWZ/tlXDMkoyAjtTH 7EQfGNRivRsaAjfnusA= ) ;; ADDITIONAL SECTION (5 records) ns1.fnal.gov. 21600 IN A 198.49.208.71 ns2.fnal.gov. 21600 IN A 198.49.208.70 ns1.fnal.gov. 21600 IN AAAA 2620:6a:0:1203::208:71 ns2.fnal.gov. 21600 IN AAAA 2620:6a:0:1203::208:70 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.fnal.gov for fnal.gov/SOA
	Received 424 bytes from 198.49.208.70
	;; Response received from 198.49.208.70 (424 octets) ;; HEADER SECTION ;; id = 55278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN SOA ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN SOA ( ns1.fnal.gov. netmanager.fnal.gov. 2025950066 ;serial 7200 ;refresh 120 ;retry 1209600 ;expire 900 ;minimum ) fnal.gov. 21600 IN RRSIG ( SOA 7 2 21600 20220201201353 20220128191353 21914 fnal.gov. NpWfhXzWdhCWzY03Ka/TG+wEkPcLg1mmYDIFAB2dGWKGb7A0iqwnsC3EieYtrvMDwlFCn9mcB/2Q aHg3RGLnu5dA3KzuGPuBXNWL3GZmlsKNkoYY9HqI5cTmCPQDzJD6GY5q/Y+frFyqrySL6s9DKx0L jSvo1D2PcOITcvThAoY= ) fnal.gov. 21600 IN RRSIG ( SOA 7 2 21600 20220201201353 20220128191353 49553 fnal.gov. MrYUJ+mAd/PpGK8/3xGa3UPgHOvr6uF+YQ2s1QkqXZMpCQZyh3f1iUtfnFIJtO+Iufs/4L5MBBv7 CFokyBMl8ND2IPh5edSMVvEZtmQA+SZilkIvJ8bqn9P0j1ZE8x/LWv5OXQsTPPOKijnImng+xcGs DgGPpzUcCxGzmrBzjKc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to adns1.es.net for fnal.gov/A
	Received 389 bytes from 192.188.22.22
	;; Response received from 192.188.22.22 (389 octets) ;; HEADER SECTION ;; id = 53454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN A 131.225.105.239 fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= ) fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	fnal.gov A RR has value 131.225.105.239
	Found 2 RRSIGs over A RRset
	`fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= )`
	`fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= )`
	RRSIG=21914 and DNSKEY=21914 verifies the A RRset
	RRSIG=49553 and DNSKEY=49553 verifies the A RRset

fnal.gov

	Query to ns1.fnal.gov for fnal.gov/A
	Received 389 bytes from 198.49.208.71
	;; Response received from 198.49.208.71 (389 octets) ;; HEADER SECTION ;; id = 59058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN A 131.225.105.239 fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= ) fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.fnal.gov is authoritative for fnal.gov
	Found RRSIG signed by fnal.gov zone
	Query to ns1.fnal.gov for fnal.gov/A
	Received 389 bytes from 198.49.208.71
	;; Response received from 198.49.208.71 (389 octets) ;; HEADER SECTION ;; id = 18700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN A 131.225.105.239 fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= ) fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fnal.gov A RR has value 131.225.105.239
	Found 2 RRSIGs over A RRset
	`fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= )`
	`fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= )`
	RRSIG=21914 and DNSKEY=21914 verifies the A RRset
	RRSIG=49553 and DNSKEY=49553 verifies the A RRset

fnal.gov

	Query to ns2.fnal.gov for fnal.gov/A
	Received 389 bytes from 198.49.208.70
	;; Response received from 198.49.208.70 (389 octets) ;; HEADER SECTION ;; id = 9924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN A 131.225.105.239 fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= ) fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.fnal.gov is authoritative for fnal.gov
	Found RRSIG signed by fnal.gov zone
	Query to ns2.fnal.gov for fnal.gov/A
	Received 389 bytes from 198.49.208.70
	;; Response received from 198.49.208.70 (389 octets) ;; HEADER SECTION ;; id = 15281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN A 131.225.105.239 fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= ) fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fnal.gov A RR has value 131.225.105.239
	Found 2 RRSIGs over A RRset
	`fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= )`
	`fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= )`
	RRSIG=21914 and DNSKEY=21914 verifies the A RRset
	RRSIG=49553 and DNSKEY=49553 verifies the A RRset

fnal.gov

	Query to adns2.es.net for fnal.gov/A
	Received 895 bytes from 192.188.22.52
	;; Response received from 192.188.22.52 (895 octets) ;; HEADER SECTION ;; id = 19055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN A 131.225.105.239 fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= ) fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= ) ;; AUTHORITY SECTION (6 records) fnal.gov. 21600 IN NS adns2.es.net. fnal.gov. 21600 IN NS adns1.es.net. fnal.gov. 21600 IN NS ns1.fnal.gov. fnal.gov. 21600 IN NS ns2.fnal.gov. fnal.gov. 21600 IN RRSIG ( NS 7 2 21600 20220131233803 20220127231057 21914 fnal.gov. AjltnA+4cRTiGeMHhMfFkM0sXOk2NcjTQQ1Olo1xVxXiIJ46e//8ruU3m71Ms9NTi+/E0xyMJv7S GIzDu66shcsK3ucAeLOZyA8sq8TOIaWTel1Q1ohqQuVwGG+kTyPrgMIsAle2l8ekRo6NAO4MKP7D 6Ath/jKy7EeskuVilE0= ) fnal.gov. 21600 IN RRSIG ( NS 7 2 21600 20220131233803 20220127231057 49553 fnal.gov. p0FXlVkgdFl8zlv4Zt2XCziBRw6ZWPvwX9n86tNWA8XneUpm3gJYtPKNZLXVaqYiWz6mkNe+MQox tAEP4Cxrz+5LBq5tkBorw6TNmc+T/AMksECnV7pb825BcrMajbX+0VGeh4jaWZ/tlXDMkoyAjtTH 7EQfGNRivRsaAjfnusA= ) ;; ADDITIONAL SECTION (5 records) ns1.fnal.gov. 21600 IN A 198.49.208.71 ns2.fnal.gov. 21600 IN A 198.49.208.70 ns1.fnal.gov. 21600 IN AAAA 2620:6a:0:1203::208:71 ns2.fnal.gov. 21600 IN AAAA 2620:6a:0:1203::208:70 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns2.es.net is authoritative for fnal.gov
	Found RRSIG signed by fnal.gov zone
	Query to adns2.es.net for fnal.gov/A
	Received 895 bytes from 192.188.22.52
	;; Response received from 192.188.22.52 (895 octets) ;; HEADER SECTION ;; id = 32790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fnal.gov. IN A ;; ANSWER SECTION (3 records) fnal.gov. 21600 IN A 131.225.105.239 fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= ) fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= ) ;; AUTHORITY SECTION (6 records) fnal.gov. 21600 IN NS ns2.fnal.gov. fnal.gov. 21600 IN NS adns2.es.net. fnal.gov. 21600 IN NS ns1.fnal.gov. fnal.gov. 21600 IN NS adns1.es.net. fnal.gov. 21600 IN RRSIG ( NS 7 2 21600 20220131233803 20220127231057 21914 fnal.gov. AjltnA+4cRTiGeMHhMfFkM0sXOk2NcjTQQ1Olo1xVxXiIJ46e//8ruU3m71Ms9NTi+/E0xyMJv7S GIzDu66shcsK3ucAeLOZyA8sq8TOIaWTel1Q1ohqQuVwGG+kTyPrgMIsAle2l8ekRo6NAO4MKP7D 6Ath/jKy7EeskuVilE0= ) fnal.gov. 21600 IN RRSIG ( NS 7 2 21600 20220131233803 20220127231057 49553 fnal.gov. p0FXlVkgdFl8zlv4Zt2XCziBRw6ZWPvwX9n86tNWA8XneUpm3gJYtPKNZLXVaqYiWz6mkNe+MQox tAEP4Cxrz+5LBq5tkBorw6TNmc+T/AMksECnV7pb825BcrMajbX+0VGeh4jaWZ/tlXDMkoyAjtTH 7EQfGNRivRsaAjfnusA= ) ;; ADDITIONAL SECTION (5 records) ns1.fnal.gov. 21600 IN A 198.49.208.71 ns2.fnal.gov. 21600 IN A 198.49.208.70 ns1.fnal.gov. 21600 IN AAAA 2620:6a:0:1203::208:71 ns2.fnal.gov. 21600 IN AAAA 2620:6a:0:1203::208:70 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	fnal.gov A RR has value 131.225.105.239
	Found 2 RRSIGs over A RRset
	`fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 21914 fnal.gov. gLELKT40GKn7y6xCSW69aF5y2qgNYhdIomCqhnGijzElqAKgcKSUDv89mtNkndn75HaWoXKXST4L HVNuOUkblvFx3jS2NTM9+QjzRITuPllMLQGcZ7HIO2Ui0J00KcKDxlnxoZNm/j3l8PdVVOHeBez5 pFCgdLV/k/cN8063Teg= )`
	`fnal.gov. 21600 IN RRSIG ( A 7 2 21600 20220201134938 20220128132742 49553 fnal.gov. pnzu27PMD4jNngKq54U4ReH0qskZJV9TfrqzvCf/TI6CLyWMld3LbKRrD0NrIKN5t4wc6AMHlKyD mYN6tyaAvb71hKn3ZGhLJ22pSCHMHNoGgd/wl+mYJb+qNLOvD52XQWa3CI3xxS3km581INLj1oPG DHyubgJpYPclr9+KwGA= )`
	RRSIG=21914 and DNSKEY=21914 verifies the A RRset
	RRSIG=49553 and DNSKEY=49553 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fnal.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: