DNSSEC Debugger - fpisc.gov

Domain Name:

Time: 2025-05-21 15:42:00 UTC

Analyzing DNSSEC problems for fpisc.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 44314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250611000000 20250521000000 20326 . ki8fK9M8rb/I+LSCC+6ZKil/CLh4jxV//8F/PDAFtzupjzeyCotFHL+Tm6kwL2wEOrZaz0a6rEba ZFhLGP+Z1XV0WJb45V0ajLFhU+IV4VCDVbzlXKQ3isrKymu8U7zrj3d/NoPbZAbxGkMfI56xv6Ev FvRYa9bjnIm0Id94ONqFclrlQTNEL25Nq+tDOH/Ro709M4j0NOcW5Ui6gIlILfsvEma+g+rHVMeJ N7Yu5FpOzaCvajJKdDGf4O3e1BI4UGrvxsLaZZGSUkeUifobG6FrTpewm9vDkU0kHfGKPqZurEuk mXcfCb/jevjBQhGG8HwoAQy4nS6IjWGfCjK3CQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250611000000 20250521000000 20326 . ki8fK9M8rb/I+LSCC+6ZKil/CLh4jxV//8F/PDAFtzupjzeyCotFHL+Tm6kwL2wEOrZaz0a6rEba ZFhLGP+Z1XV0WJb45V0ajLFhU+IV4VCDVbzlXKQ3isrKymu8U7zrj3d/NoPbZAbxGkMfI56xv6Ev FvRYa9bjnIm0Id94ONqFclrlQTNEL25Nq+tDOH/Ro709M4j0NOcW5Ui6gIlILfsvEma+g+rHVMeJ N7Yu5FpOzaCvajJKdDGf4O3e1BI4UGrvxsLaZZGSUkeUifobG6FrTpewm9vDkU0kHfGKPqZurEuk mXcfCb/jevjBQhGG8HwoAQy4nS6IjWGfCjK3CQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to d.root-servers.net for fpisc.gov/A
	Received 616 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 616 octets ;; HEADER SECTION ;; id = 6337 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . SIh4WXCX5cSaa/Bz5iyvplBINW43+Ysp1Z63yO6XpTAGLQ8Xyaz7QkMW1h6tW6KUiRni64KAZoSu iwwI6ZIl2ooeAGcsiJ18Ls89CqiuuKRwWSPlSWRdlYKSfFNqOiGa7lkvWT76Ng5Ba1f+TUgUWfld yFBEdoLJhjtvF65guyUIPJTTYIaCq4yvpGzCvuj7z0Pa5gc2/Y0lnEwmInNH5tAgcAr+OWbqytUf 72558CSXvYu3V3Q46PNLi0VuFR5Wft6gDkULCRNX0w+ZLalQblXUoLODNJ7VYCW9CVVtJpaftN7w 6xo0jh9ySRWNve7wJAyrYrJRsEzK3npZTnv9MA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 610 octets ;; HEADER SECTION ;; id = 36355 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . SIh4WXCX5cSaa/Bz5iyvplBINW43+Ysp1Z63yO6XpTAGLQ8Xyaz7QkMW1h6tW6KUiRni64KAZoSu iwwI6ZIl2ooeAGcsiJ18Ls89CqiuuKRwWSPlSWRdlYKSfFNqOiGa7lkvWT76Ng5Ba1f+TUgUWfld yFBEdoLJhjtvF65guyUIPJTTYIaCq4yvpGzCvuj7z0Pa5gc2/Y0lnEwmInNH5tAgcAr+OWbqytUf 72558CSXvYu3V3Q46PNLi0VuFR5Wft6gDkULCRNX0w+ZLalQblXUoLODNJ7VYCW9CVVtJpaftN7w 6xo0jh9ySRWNve7wJAyrYrJRsEzK3npZTnv9MA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 3462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . SIh4WXCX5cSaa/Bz5iyvplBINW43+Ysp1Z63yO6XpTAGLQ8Xyaz7QkMW1h6tW6KUiRni64KAZoSu iwwI6ZIl2ooeAGcsiJ18Ls89CqiuuKRwWSPlSWRdlYKSfFNqOiGa7lkvWT76Ng5Ba1f+TUgUWfld yFBEdoLJhjtvF65guyUIPJTTYIaCq4yvpGzCvuj7z0Pa5gc2/Y0lnEwmInNH5tAgcAr+OWbqytUf 72558CSXvYu3V3Q46PNLi0VuFR5Wft6gDkULCRNX0w+ZLalQblXUoLODNJ7VYCW9CVVtJpaftN7w 6xo0jh9ySRWNve7wJAyrYrJRsEzK3npZTnv9MA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20250603050000 20250521040000 53148 . SIh4WXCX5cSaa/Bz5iyvplBINW43+Ysp1Z63yO6XpTAGLQ8Xyaz7QkMW1h6tW6KUiRni64KAZoSu iwwI6ZIl2ooeAGcsiJ18Ls89CqiuuKRwWSPlSWRdlYKSfFNqOiGa7lkvWT76Ng5Ba1f+TUgUWfld yFBEdoLJhjtvF65guyUIPJTTYIaCq4yvpGzCvuj7z0Pa5gc2/Y0lnEwmInNH5tAgcAr+OWbqytUf 72558CSXvYu3V3Q46PNLi0VuFR5Wft6gDkULCRNX0w+ZLalQblXUoLODNJ7VYCW9CVVtJpaftN7w 6xo0jh9ySRWNve7wJAyrYrJRsEzK3npZTnv9MA== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 8224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250704110557 20250504110557 2536 gov. tAeRYp56dPYu79FfML7RVcEKV8saNzG7X9/H2Krxd6fbG/aG0lMmwKQbHE4g3q3S7bIopKhjIVcm rIYydkI0uQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250704110557 20250504110557 2536 gov. tAeRYp56dPYu79FfML7RVcEKV8saNzG7X9/H2Krxd6fbG/aG0lMmwKQbHE4g3q3S7bIopKhjIVcm rIYydkI0uQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for fpisc.gov/A
	Received 467 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 467 octets ;; HEADER SECTION ;; id = 56603 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fpisc.gov. 10800 IN NS dns.gsa.gov. fpisc.gov. 10800 IN NS dns2.gsa.gov. fpisc.gov. 10800 IN NS dns3.gsa.gov. fpisc.gov. 10800 IN NS dns4.gsa.gov. fpisc.gov. 10800 IN NS dns5.gsa.gov. fpisc.gov. 3600 IN DS ( 15302 8 2 47b7bda9a1f1d2ddf9a3dc55e393e8249488c130e739bfb5b8362ae0bb25ea5b ) fpisc.gov. 3600 IN DS ( 17299 8 2 bee5b0e01e2e1839774910038013bcbd95c099cfce23aa8baf6d49f4b333b10c ) fpisc.gov. 3600 IN RRSIG ( DS 13 2 3600 20250522164200 20250520144200 35496 gov. YGq2ZRaWlakOK8W6QL2+3tPVZWcZ8vppgxzTrvrOjx4FJz6G5RQlZdjnaD9S1qKdcOB1go4yUMEU 0m8sQlSp9A== ) ;; ADDITIONAL SECTION (8 records) dns.gsa.gov. 3600 IN A 13.248.142.184 dns.gsa.gov. 3600 IN AAAA 2600:1f16:8f2:d500::4 dns2.gsa.gov. 3600 IN A 76.223.24.135 dns3.gsa.gov. 3600 IN A 13.248.144.182 dns4.gsa.gov. 3600 IN A 13.248.149.147 dns4.gsa.gov. 3600 IN AAAA 2600:1f14:653:bb00:b24e:739c:b87d:8fee dns5.gsa.gov. 3600 IN A 76.223.9.162 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for fpisc.gov/DNSKEY
	Received 467 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 467 octets ;; HEADER SECTION ;; id = 44583 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fpisc.gov. 10800 IN NS dns.gsa.gov. fpisc.gov. 10800 IN NS dns2.gsa.gov. fpisc.gov. 10800 IN NS dns3.gsa.gov. fpisc.gov. 10800 IN NS dns4.gsa.gov. fpisc.gov. 10800 IN NS dns5.gsa.gov. fpisc.gov. 3600 IN DS ( 15302 8 2 47b7bda9a1f1d2ddf9a3dc55e393e8249488c130e739bfb5b8362ae0bb25ea5b ) fpisc.gov. 3600 IN DS ( 17299 8 2 bee5b0e01e2e1839774910038013bcbd95c099cfce23aa8baf6d49f4b333b10c ) fpisc.gov. 3600 IN RRSIG ( DS 13 2 3600 20250522164200 20250520144200 35496 gov. AWJ/YFD9yizhJlZTP8owgqdnHzAD6PIvOZiG4CuQDOGUV2zMQQjOx5VCR9IDDG+L2L9RQCLxxmJp 4tk46AFCLw== ) ;; ADDITIONAL SECTION (8 records) dns.gsa.gov. 3600 IN A 13.248.142.184 dns.gsa.gov. 3600 IN AAAA 2600:1f16:8f2:d500::4 dns2.gsa.gov. 3600 IN A 76.223.24.135 dns3.gsa.gov. 3600 IN A 13.248.144.182 dns4.gsa.gov. 3600 IN A 13.248.149.147 dns4.gsa.gov. 3600 IN AAAA 2600:1f14:653:bb00:b24e:739c:b87d:8fee dns5.gsa.gov. 3600 IN A 76.223.9.162 ;; { "EDNS-VERSION": 0 }
	Found child zone fpisc.gov

fpisc.gov

	Checking DS between gov and fpisc.gov
	Query to d.ns.gov for fpisc.gov/DS
	Received 233 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 233 octets ;; HEADER SECTION ;; id = 18736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN DS ;; ANSWER SECTION (3 records) fpisc.gov. 3600 IN DS ( 15302 8 2 47b7bda9a1f1d2ddf9a3dc55e393e8249488c130e739bfb5b8362ae0bb25ea5b ) fpisc.gov. 3600 IN DS ( 17299 8 2 bee5b0e01e2e1839774910038013bcbd95c099cfce23aa8baf6d49f4b333b10c ) fpisc.gov. 3600 IN RRSIG ( DS 13 2 3600 20250522164200 20250520144200 35496 gov. iKGUMIE/VQZZpdz0R5EUiYqb9E6Pi/rI0OtUFHaOMxEyGK+CLc+PoFohC/3Pb9aIAUHgcDIeDMKt xwrJbJKXlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for fpisc.gov in the gov zone
	DS=15302/SHA-256 has algorithm RSASHA256
	DS=17299/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fpisc.gov. 3600 IN RRSIG ( DS 13 2 3600 20250522164200 20250520144200 35496 gov. iKGUMIE/VQZZpdz0R5EUiYqb9E6Pi/rI0OtUFHaOMxEyGK+CLc+PoFohC/3Pb9aIAUHgcDIeDMKt xwrJbJKXlg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=15302/SHA-256 is now in the chain-of-trust
	DS=17299/SHA-256 is now in the chain-of-trust
	`fpisc.gov. 3600 IN DS ( 15302 8 2 47b7bda9a1f1d2ddf9a3dc55e393e8249488c130e739bfb5b8362ae0bb25ea5b )`
	`fpisc.gov. 3600 IN DS ( 17299 8 2 bee5b0e01e2e1839774910038013bcbd95c099cfce23aa8baf6d49f4b333b10c )`
	Query to dns4.gsa.gov for fpisc.gov/DNSKEY
	Received 989 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 989 octets ;; HEADER SECTION ;; id = 28393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN DNSKEY ;; ANSWER SECTION (6 records) fpisc.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAa6ytYpEetJt37dm81FAR37Nv++dzA/bwTKZBlqzGCmnKIJvsXmiHLxPkX9QexpoPdWrTbOx wymShLRuCTCrR8XBmHGgRFO9ugghWSGmNJziEQ9DSlyv76GCbwswXbSPHoVXK3Xu1D2qaTYrCBwU Sv5ib4vx4tJBcATVV1mSBfer ) ; keytag 60681 fpisc.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAdkiw6qK/BeRvtnKRfSSH4dJx6ybKuuF3hr7/0O2njNC8EIRDXk8YCSP+soQDzqZFL2t9TJY NkQ69S6scgyKzE+IxbdYlbZYo9M8hzypMxKINP/y8TOxbFjnGHHPZ+JvbbUUuq8I9XN5tLRcMtS1 Eu4XtxqfCyFPrCzkUSVrxnU9 ) ; keytag 17299 fpisc.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAacdM1nc3yHJIq+cdLTYK5nI7wJtE2BiGHljrYob8AebmDG3GYsm3isMsxqsMzlbWn6z3z0B OSRVYc7DMGh233Mt8jzVriy7l3ra4ldSig8kBjsdiXjbeIiYIv0F3qnfHhJr2W3Q2AVHxqu2KaNe azrUw0HJu3Z96RjHtQ1GhuwB ) ; keytag 831 fpisc.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20250618025612 20250519025112 831 fpisc.gov. M29eKvRyvJdUYlqR7naJD3FvAul9G3XGsl6Z9SpI5RewLfxvy0/j+CKtIcT1jY1IR1wzFIN7lW3E zdVfRpqFsmVRZzH9NwosxsQutIoCkwaLiSE+fRqTaVJqcucqPGGIXQjO5uPMf/JAB2NanevYaGvB 2gs1kWjL9Qz2nuYz7fU= ) fpisc.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20250618025612 20250519025112 17299 fpisc.gov. tao3g6ip3ICgfUmy0lTaXy410ENhX0oOl50gaCIVkGm2+s1hikL25b9XjcpmYqytGKNLH+gZiNrd YYXo6yQQriSqhEntsg2jOcTfUe9aZK1+Bfmm/cQ0GKPcXDrfTXIR9TZ6A7HPanrQkfYJvm825fjL JTzGnlO5tBCcVM9+xgM= ) fpisc.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20250618025612 20250519025112 60681 fpisc.gov. Cli5gG5LsVNYabcxbIf+PmK1BuukCNBM+z7Jh28qzhnyO9m07KzrDg9U5hPxjnssbas083EZH4Fj V+2amb6BeovZunwzlG5XTsgAXU/t+9uLh71tiKAnf+qOg8Lh3Mf0Vf45m8LYbpJGhl+m2cGtutsq N876lQvOkoT4tvyNLrM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for fpisc.gov
	`fpisc.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAa6ytYpEetJt37dm81FAR37Nv++dzA/bwTKZBlqzGCmnKIJvsXmiHLxPkX9QexpoPdWrTbOx wymShLRuCTCrR8XBmHGgRFO9ugghWSGmNJziEQ9DSlyv76GCbwswXbSPHoVXK3Xu1D2qaTYrCBwU Sv5ib4vx4tJBcATVV1mSBfer ) ; keytag 60681`
	`fpisc.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAdkiw6qK/BeRvtnKRfSSH4dJx6ybKuuF3hr7/0O2njNC8EIRDXk8YCSP+soQDzqZFL2t9TJY NkQ69S6scgyKzE+IxbdYlbZYo9M8hzypMxKINP/y8TOxbFjnGHHPZ+JvbbUUuq8I9XN5tLRcMtS1 Eu4XtxqfCyFPrCzkUSVrxnU9 ) ; keytag 17299`
	`fpisc.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAacdM1nc3yHJIq+cdLTYK5nI7wJtE2BiGHljrYob8AebmDG3GYsm3isMsxqsMzlbWn6z3z0B OSRVYc7DMGh233Mt8jzVriy7l3ra4ldSig8kBjsdiXjbeIiYIv0F3qnfHhJr2W3Q2AVHxqu2KaNe azrUw0HJu3Z96RjHtQ1GhuwB ) ; keytag 831`
	DNSKEY=17299/SEP is now in the chain-of-trust
	DS=17299/SHA-256 verifies DNSKEY=17299/SEP
	DS=15302/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`fpisc.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20250618025612 20250519025112 831 fpisc.gov. M29eKvRyvJdUYlqR7naJD3FvAul9G3XGsl6Z9SpI5RewLfxvy0/j+CKtIcT1jY1IR1wzFIN7lW3E zdVfRpqFsmVRZzH9NwosxsQutIoCkwaLiSE+fRqTaVJqcucqPGGIXQjO5uPMf/JAB2NanevYaGvB 2gs1kWjL9Qz2nuYz7fU= )`
	`fpisc.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20250618025612 20250519025112 17299 fpisc.gov. tao3g6ip3ICgfUmy0lTaXy410ENhX0oOl50gaCIVkGm2+s1hikL25b9XjcpmYqytGKNLH+gZiNrd YYXo6yQQriSqhEntsg2jOcTfUe9aZK1+Bfmm/cQ0GKPcXDrfTXIR9TZ6A7HPanrQkfYJvm825fjL JTzGnlO5tBCcVM9+xgM= )`
	`fpisc.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20250618025612 20250519025112 60681 fpisc.gov. Cli5gG5LsVNYabcxbIf+PmK1BuukCNBM+z7Jh28qzhnyO9m07KzrDg9U5hPxjnssbas083EZH4Fj V+2amb6BeovZunwzlG5XTsgAXU/t+9uLh71tiKAnf+qOg8Lh3Mf0Vf45m8LYbpJGhl+m2cGtutsq N876lQvOkoT4tvyNLrM= )`
	RRSIG=831 and DNSKEY=831 verifies the DNSKEY RRset
	RRSIG=17299 and DNSKEY=17299/SEP verifies the DNSKEY RRset
	RRSIG=60681 and DNSKEY=60681 verifies the DNSKEY RRset
	DNSKEY=60681 is now in the chain-of-trust
	DNSKEY=831 is now in the chain-of-trust
	Query to dns3.gsa.gov for fpisc.gov/A
	Received 392 bytes from 13.248.144.182
	;; Response received from [13.248.144.182] 392 octets ;; HEADER SECTION ;; id = 2322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns3.gsa.gov is authoritative for fpisc.gov
	Found RRSIG signed by fpisc.gov zone
	Query to dns4.gsa.gov for fpisc.gov/SOA
	Received 434 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 434 octets ;; HEADER SECTION ;; id = 46550 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN SOA ;; ANSWER SECTION (3 records) fpisc.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 766637773 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) fpisc.gov. 10800 IN RRSIG ( SOA 8 2 10800 20250618025612 20250519025112 831 fpisc.gov. EkFB/ufxP713xVvujuVFdfAWKeBcbJdT4tjf3r07SLixdLA1vNVGXqjcjF1CmSBUdW5lvOZ9dNjw gL9DNFlaGrfJ76gZYCESMPGPIwUpuKD6tHLDlFcjzjQ7AkXCzCtVznFT2LHJu25HeXsSI79UzW7P XA1l3KGGisDiZmiEJNI= ) fpisc.gov. 10800 IN RRSIG ( SOA 8 2 10800 20250618025612 20250519025112 60681 fpisc.gov. BnyCY29yFoZ7b5badpLQS7yZvpaVtcI9y8RyoMzbbFBfoZe9qH/gNXALIOPGab5+8ea75iSZjp2r v7QWQtR5+S/KBsHGgWzu2C/5WY8znM49bZK1rMRkzHrOvH8SPe4eUEq8b/aqVLpTkrpOBf0d+FA8 3cDdgzQGcIQ64tcF+Vc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns.gsa.gov for fpisc.gov/SOA
	Received 434 bytes from 13.248.142.184
	;; Response received from [13.248.142.184] 434 octets ;; HEADER SECTION ;; id = 24671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN SOA ;; ANSWER SECTION (3 records) fpisc.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 766637773 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) fpisc.gov. 10800 IN RRSIG ( SOA 8 2 10800 20250618025612 20250519025112 831 fpisc.gov. EkFB/ufxP713xVvujuVFdfAWKeBcbJdT4tjf3r07SLixdLA1vNVGXqjcjF1CmSBUdW5lvOZ9dNjw gL9DNFlaGrfJ76gZYCESMPGPIwUpuKD6tHLDlFcjzjQ7AkXCzCtVznFT2LHJu25HeXsSI79UzW7P XA1l3KGGisDiZmiEJNI= ) fpisc.gov. 10800 IN RRSIG ( SOA 8 2 10800 20250618025612 20250519025112 60681 fpisc.gov. BnyCY29yFoZ7b5badpLQS7yZvpaVtcI9y8RyoMzbbFBfoZe9qH/gNXALIOPGab5+8ea75iSZjp2r v7QWQtR5+S/KBsHGgWzu2C/5WY8znM49bZK1rMRkzHrOvH8SPe4eUEq8b/aqVLpTkrpOBf0d+FA8 3cDdgzQGcIQ64tcF+Vc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.gsa.gov for fpisc.gov/SOA
	Received 434 bytes from 76.223.24.135
	;; Response received from [76.223.24.135] 434 octets ;; HEADER SECTION ;; id = 9724 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN SOA ;; ANSWER SECTION (3 records) fpisc.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 766637773 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) fpisc.gov. 10800 IN RRSIG ( SOA 8 2 10800 20250618025612 20250519025112 831 fpisc.gov. EkFB/ufxP713xVvujuVFdfAWKeBcbJdT4tjf3r07SLixdLA1vNVGXqjcjF1CmSBUdW5lvOZ9dNjw gL9DNFlaGrfJ76gZYCESMPGPIwUpuKD6tHLDlFcjzjQ7AkXCzCtVznFT2LHJu25HeXsSI79UzW7P XA1l3KGGisDiZmiEJNI= ) fpisc.gov. 10800 IN RRSIG ( SOA 8 2 10800 20250618025612 20250519025112 60681 fpisc.gov. BnyCY29yFoZ7b5badpLQS7yZvpaVtcI9y8RyoMzbbFBfoZe9qH/gNXALIOPGab5+8ea75iSZjp2r v7QWQtR5+S/KBsHGgWzu2C/5WY8znM49bZK1rMRkzHrOvH8SPe4eUEq8b/aqVLpTkrpOBf0d+FA8 3cDdgzQGcIQ64tcF+Vc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns5.gsa.gov for fpisc.gov/SOA
	Received 434 bytes from 76.223.9.162
	;; Response received from [76.223.9.162] 434 octets ;; HEADER SECTION ;; id = 9078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN SOA ;; ANSWER SECTION (3 records) fpisc.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 766637773 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) fpisc.gov. 10800 IN RRSIG ( SOA 8 2 10800 20250618025612 20250519025112 831 fpisc.gov. EkFB/ufxP713xVvujuVFdfAWKeBcbJdT4tjf3r07SLixdLA1vNVGXqjcjF1CmSBUdW5lvOZ9dNjw gL9DNFlaGrfJ76gZYCESMPGPIwUpuKD6tHLDlFcjzjQ7AkXCzCtVznFT2LHJu25HeXsSI79UzW7P XA1l3KGGisDiZmiEJNI= ) fpisc.gov. 10800 IN RRSIG ( SOA 8 2 10800 20250618025612 20250519025112 60681 fpisc.gov. BnyCY29yFoZ7b5badpLQS7yZvpaVtcI9y8RyoMzbbFBfoZe9qH/gNXALIOPGab5+8ea75iSZjp2r v7QWQtR5+S/KBsHGgWzu2C/5WY8znM49bZK1rMRkzHrOvH8SPe4eUEq8b/aqVLpTkrpOBf0d+FA8 3cDdgzQGcIQ64tcF+Vc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns3.gsa.gov for fpisc.gov/A
	Received 392 bytes from 13.248.144.182
	;; Response received from [13.248.144.182] 392 octets ;; HEADER SECTION ;; id = 30643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fpisc.gov A RR has value 23.22.13.113
	Found 2 RRSIGs over A RRset
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= )`
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= )`
	RRSIG=831 and DNSKEY=831 verifies the A RRset
	RRSIG=60681 and DNSKEY=60681 verifies the A RRset

fpisc.gov

	Query to dns.gsa.gov for fpisc.gov/A
	Received 392 bytes from 13.248.142.184
	;; Response received from [13.248.142.184] 392 octets ;; HEADER SECTION ;; id = 46914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns.gsa.gov is authoritative for fpisc.gov
	Found RRSIG signed by fpisc.gov zone
	Query to dns.gsa.gov for fpisc.gov/A
	Received 392 bytes from 13.248.142.184
	;; Response received from [13.248.142.184] 392 octets ;; HEADER SECTION ;; id = 57092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fpisc.gov A RR has value 23.22.13.113
	Found 2 RRSIGs over A RRset
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= )`
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= )`
	RRSIG=831 and DNSKEY=831 verifies the A RRset
	RRSIG=60681 and DNSKEY=60681 verifies the A RRset

fpisc.gov

	Query to dns2.gsa.gov for fpisc.gov/A
	Received 392 bytes from 76.223.24.135
	;; Response received from [76.223.24.135] 392 octets ;; HEADER SECTION ;; id = 60503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.gsa.gov is authoritative for fpisc.gov
	Found RRSIG signed by fpisc.gov zone
	Query to dns2.gsa.gov for fpisc.gov/A
	Received 392 bytes from 76.223.24.135
	;; Response received from [76.223.24.135] 392 octets ;; HEADER SECTION ;; id = 50641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fpisc.gov A RR has value 23.22.13.113
	Found 2 RRSIGs over A RRset
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= )`
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= )`
	RRSIG=831 and DNSKEY=831 verifies the A RRset
	RRSIG=60681 and DNSKEY=60681 verifies the A RRset

fpisc.gov

	Query to dns5.gsa.gov for fpisc.gov/A
	Received 392 bytes from 76.223.9.162
	;; Response received from [76.223.9.162] 392 octets ;; HEADER SECTION ;; id = 53075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns5.gsa.gov is authoritative for fpisc.gov
	Found RRSIG signed by fpisc.gov zone
	Query to dns5.gsa.gov for fpisc.gov/A
	Received 392 bytes from 76.223.9.162
	;; Response received from [76.223.9.162] 392 octets ;; HEADER SECTION ;; id = 60393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fpisc.gov A RR has value 23.22.13.113
	Found 2 RRSIGs over A RRset
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= )`
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= )`
	RRSIG=831 and DNSKEY=831 verifies the A RRset
	RRSIG=60681 and DNSKEY=60681 verifies the A RRset

fpisc.gov

	Query to dns4.gsa.gov for fpisc.gov/A
	Received 392 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 392 octets ;; HEADER SECTION ;; id = 37430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns4.gsa.gov is authoritative for fpisc.gov
	Found RRSIG signed by fpisc.gov zone
	Query to dns4.gsa.gov for fpisc.gov/A
	Received 392 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 392 octets ;; HEADER SECTION ;; id = 15012 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpisc.gov. IN A ;; ANSWER SECTION (3 records) fpisc.gov. 300 IN A 23.22.13.113 fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= ) fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fpisc.gov A RR has value 23.22.13.113
	Found 2 RRSIGs over A RRset
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 831 fpisc.gov. FbeBHgmjncMEuW4pBQBSoh4LUM0lDlUiKd4/VgM3MhtsQXFwRy3ELI+EMIoA9tfpQapXU5Avd0Fs KF9XfOZydx5f6xb8YAF9RrhI11Wsng47BEcbDPhTp51JbpyRibfx8KTZj4TQm3PrrBMP0iR3XXs8 X7VLrhQDS91AIhkWbEs= )`
	`fpisc.gov. 300 IN RRSIG ( A 8 2 300 20250618025612 20250519025112 60681 fpisc.gov. HWlbqrFmFfD3lRrnaLoxdZQ6GhFOUW1xBK0OmZmZGYM6WynrikFPx4tyC25OsZB3C46Eqw6YfF3y Kgm4C5RIx5HaE3yvdiO0ZUdp+tPOVrZSAa7SxygfMKwyvsp9L2Yd+XzN/7zKpE6VjpAP20Y7pAAH +ySOKJ11kEVWMJKpPb8= )`
	RRSIG=831 and DNSKEY=831 verifies the A RRset
	RRSIG=60681 and DNSKEY=60681 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fpisc.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: