DNSSEC Debugger - fpki-lab.gov

Domain Name:

Time: 2025-12-24 09:16:37 UTC

Analyzing DNSSEC problems for fpki-lab.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1414 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1414 octets ;; HEADER SECTION ;; id = 60724 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to g.root-servers.net for fpki-lab.gov/A
	Received 622 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 622 octets ;; HEADER SECTION ;; id = 18308 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260106050000 20251224040000 61809 . wRtY75fO5X5LHoH7/BQjsLLXHGz3eu01WCQvcX7Bn7dx0QABI0oO1lHUBB/2gxChMBGJVWt27YA+ qn8bB1d2c8bFNupCMu5eRodsXMbbjIZor1k/3ddmHtfgM2PgTm4E3KU6I0z0kvHj/6S7J2Q4fpNZ c46eC5oyFic+9CAs9ZMJwITxPX85Z+kWppzt715g7X49aqBStRay+s+pvQJ1wKhlysjri1Bmkf1x KMpBwi5pWkpnaTE+z1MWXSqYiyot3N02j2I0kQr8NYv7aqXqJKsxV3JX0SO9NSWK47GpL2Pr/Od4 vExnuFfKLlBj4BFryLZbl7IdFKscZVL4K8oZrQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 610 octets ;; HEADER SECTION ;; id = 13959 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260106050000 20251224040000 61809 . wRtY75fO5X5LHoH7/BQjsLLXHGz3eu01WCQvcX7Bn7dx0QABI0oO1lHUBB/2gxChMBGJVWt27YA+ qn8bB1d2c8bFNupCMu5eRodsXMbbjIZor1k/3ddmHtfgM2PgTm4E3KU6I0z0kvHj/6S7J2Q4fpNZ c46eC5oyFic+9CAs9ZMJwITxPX85Z+kWppzt715g7X49aqBStRay+s+pvQJ1wKhlysjri1Bmkf1x KMpBwi5pWkpnaTE+z1MWXSqYiyot3N02j2I0kQr8NYv7aqXqJKsxV3JX0SO9NSWK47GpL2Pr/Od4 vExnuFfKLlBj4BFryLZbl7IdFKscZVL4K8oZrQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 32720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260106050000 20251224040000 61809 . wRtY75fO5X5LHoH7/BQjsLLXHGz3eu01WCQvcX7Bn7dx0QABI0oO1lHUBB/2gxChMBGJVWt27YA+ qn8bB1d2c8bFNupCMu5eRodsXMbbjIZor1k/3ddmHtfgM2PgTm4E3KU6I0z0kvHj/6S7J2Q4fpNZ c46eC5oyFic+9CAs9ZMJwITxPX85Z+kWppzt715g7X49aqBStRay+s+pvQJ1wKhlysjri1Bmkf1x KMpBwi5pWkpnaTE+z1MWXSqYiyot3N02j2I0kQr8NYv7aqXqJKsxV3JX0SO9NSWK47GpL2Pr/Od4 vExnuFfKLlBj4BFryLZbl7IdFKscZVL4K8oZrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260106050000 20251224040000 61809 . wRtY75fO5X5LHoH7/BQjsLLXHGz3eu01WCQvcX7Bn7dx0QABI0oO1lHUBB/2gxChMBGJVWt27YA+ qn8bB1d2c8bFNupCMu5eRodsXMbbjIZor1k/3ddmHtfgM2PgTm4E3KU6I0z0kvHj/6S7J2Q4fpNZ c46eC5oyFic+9CAs9ZMJwITxPX85Z+kWppzt715g7X49aqBStRay+s+pvQJ1wKhlysjri1Bmkf1x KMpBwi5pWkpnaTE+z1MWXSqYiyot3N02j2I0kQr8NYv7aqXqJKsxV3JX0SO9NSWK47GpL2Pr/Od4 vExnuFfKLlBj4BFryLZbl7IdFKscZVL4K8oZrQ== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 27009 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for fpki-lab.gov/A
	Received 362 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 362 octets ;; HEADER SECTION ;; id = 31905 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fpki-lab.gov. 10800 IN NS dns1.fpki-lab.gov. fpki-lab.gov. 10800 IN NS dns2.fpki-lab.gov. fpki-lab.gov. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f ) fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20251225101637 20251223081637 35496 gov. GcOhl0fid7NeGJe2Yz8lP7mAJ/eBJKy3Y/UjL5rlRIg/0FxO28NIYQMZ1+O+IsBhpeK0zBGvbrhg F1r9eGmJAw== ) ;; ADDITIONAL SECTION (5 records) dns1.fpki-lab.gov. 3600 IN A 199.167.92.100 dns1.fpki-lab.gov. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.fpki-lab.gov. 3600 IN A 199.167.93.100 dns2.fpki-lab.gov. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for fpki-lab.gov/DNSKEY
	Received 362 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 362 octets ;; HEADER SECTION ;; id = 18605 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fpki-lab.gov. 10800 IN NS dns1.fpki-lab.gov. fpki-lab.gov. 10800 IN NS dns2.fpki-lab.gov. fpki-lab.gov. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f ) fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20251225101637 20251223081637 35496 gov. NGARTD/lI0KziGK7cUUSbsygtXpoTWAhRxpLggf5rYI77lne26QGJW45q3XhZtQsyMARCgZx4BWW vhIw9CYFfA== ) ;; ADDITIONAL SECTION (5 records) dns1.fpki-lab.gov. 3600 IN A 199.167.92.100 dns1.fpki-lab.gov. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.fpki-lab.gov. 3600 IN A 199.167.93.100 dns2.fpki-lab.gov. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Found child zone fpki-lab.gov

fpki-lab.gov

	Checking DS between gov and fpki-lab.gov
	Query to a.ns.gov for fpki-lab.gov/DS
	Received 236 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 236 octets ;; HEADER SECTION ;; id = 42130 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN DS ;; ANSWER SECTION (3 records) fpki-lab.gov. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f ) fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20251225101637 20251223081637 35496 gov. X48bzwHLr8yjkEF+pD1CRLyjchSDvh5LuQobbolGpO+smCOGQUbKGwUR7mAXYI/WAu3bkTHwrvAU MfS970v96A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for fpki-lab.gov in the gov zone
	DS=29035/SHA-256 has algorithm RSASHA256
	DS=4219/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20251225101637 20251223081637 35496 gov. X48bzwHLr8yjkEF+pD1CRLyjchSDvh5LuQobbolGpO+smCOGQUbKGwUR7mAXYI/WAu3bkTHwrvAU MfS970v96A== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=29035/SHA-256 is now in the chain-of-trust
	DS=4219/SHA-256 is now in the chain-of-trust
	`fpki-lab.gov. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f )`
	`fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 )`
	Query to dns2.fpki-lab.gov for fpki-lab.gov/DNSKEY
	Received 2345 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 2345 octets ;; HEADER SECTION ;; id = 60125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN DNSKEY ;; ANSWER SECTION (8 records) fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc3kg6cPi9uUB0/2IGZvH79LhYgvfniZPVvKImYxZxYL4BWcs4E+Hv2GqU8M0rYhYfFhn1d3 eZbfXBybsWOBUHyVJXwhJZlHBJ8Ud9ANCJ65CFebGeecSsxfT0nvv26apY5zMQxU2nyUWbQ7vSnK 4qSpZRfRxGbem/4VrGTuJ58nog7XuyYLSGXeEqPtG2fo26UjGpUNLbqMurCy3wdmHl21VbM7VhYl p9NQwO++bEDpS1hsUOoNkbww4gNWqN8zQjgaKyUZc1DFb0b2mfkIO/4Qbi4u+Uh9v74sm++erLmI wc7HywqRQfvdd0sI2HyZ1xZJVlauyg/XkkUe7zH2Shc= ) ; keytag 29035 fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbCNjou0CVWFCq104UMjYxv5hSlLSAEo7q6vSlXx5cTJnvrlrtX4R6e5pfqmkBP3Jr0847ZY pWcf/OR0lepRRVoz6ELAXpm/pOr11S8B14UhvewmtcIPSsCOZn19ggkHSkfyRJ5Z3l/8i+1galx+ o3NbKDNK+t3ISTa7PTFxvaWk7IgQvYE9fy0UKmIFFWEe4OM/7MCtVJkQfsp8foSRh8dIiIMvhG8S Ley8tLQs3zQoJJGxSH6nHgTkuLbcc1Nrwu4oEtW9txo7xXgpGgk6CLRIGI9IgmmXFor7j2uxupHX XSVOu4Qud27imlPD1KdwNUVsVNNhRXliyh8wujk8+V0= ) ; keytag 4219 fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAYqC4Kua1w3rLM+MEc+nx4/WobwbdetCgigZ49oB1HufE4dQwaH975ftW3N9VbfvovoTmUEz XWeCtFFPn3Hala4BZ1YkVPqfrBSjQYhdHB+UskahY90YJnL+aIbMwgGOXP0KutYLVRjb/zOSIIsl Xtr/gjlaygoDQloBUuIcVuUaoN7X+aVCckGkPVIbWteIsaYf5+E5ofmP5ttn0RhxEym+uFcI07sH O2dwZu/EB9p7Cav1zn7CmzfaggGKgXFIjYjPIgKNym4xeDzIWCLbyUBGIrTjfUpXY9vUvAvzyAuS CgY5dnZXttfteL/OJkbDSTcQOZlwNSHuoTekvye0u3k= ) ; keytag 40410 fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZkjnmZ/z15OEj9OQEPA89CK3lqvjLvKxLLU7SrVI1OchU/G67pJh6sgvuTq+LjmjYhkwG+0 dxBjWmcUPAG1VLFBUU0T2bWbKh3Xt17fY7u6uLkf/l6tnu7Ppt76ad4EPCD6bnjAQQSGWI5y5ntk yePLM4WpC01jV5UBzPuUkJ6lg/W37tPtOh1HuuCuuVswl/tkOPL0hwxBERs0OX7NhU2aAKLrkgEu uyKGxA4iJd4Db7sZUomw0eBzC/3qaujiC/woLl3WQ2itS2SDW/IuxF283y7iMXKxEQioGJCYexJT YwJwNTQqhialMOJpzH7s3u/CTT9BeXyOtKnOx3Ihy2c= ) ; keytag 38433 fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251227111826 20251220101826 29035 fpki-lab.gov. bHlYAbRdot7g2UY6lOr1y7567UE9e3Oardft2F4lzGsJm6+8RGvOqJ6Kmsxj+f7rLnBX38hmLRqy lhNk2/8HpmZGKxtQZ/m8UmI2TjrzZekEc4SauDZe1lWaKFqgMzok1u3yDcgUnwhxUger7l3G3iCw XxU+/QZcjPgVR5JBjtWQeovNgT5F3s0QC1fwHwqq6IA35l4QOczmrtzoAacWS5WG/CdUjrFjOsU6 A+UxTiUWiWGaJ28Sf/FrQ6iU60jL3ih3B+CY5HHNfWynluI8Qgr7y3mS1n8mJwGxUUHWEavloTzm Tbi8J7V3svwtPIYwZo9Dlv5Zu4K2JshVd1e9tg== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251227111826 20251220101826 4219 fpki-lab.gov. aQe6PlOga7OuAHILr6bAPbWlEakJ0CX4GFXYyu+aOlrqeWXsgwI3WflOW2hfvUgdxvGKb+EzoKwL LYZxkaF8T3HnYHb9Uyq13HvL01JuKTQsdDFGTCD3W12aXxA3kGihUxpXhMeLbuP0JPtpKH2nvBJF 2Y40C7saRJDdlHk87OtT0yWpUOMffX5u0OW/GZc+1HIiTeUvZi2yDGJa6aMShxOzazfS/XhQsiis WJ71HzDAO8mE8ZBcRzmqGc+vx9ipXupIx1tPcjP2YfU5j7eZXnbM9sDJ8mMDHNMiOp8PBB77+Hxz Rw8ew27ifMwcA/zDc+pHTy+3k/hDF3Nsbwpz8w== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251227111826 20251220101826 40410 fpki-lab.gov. B14DbbPaQFzUvmR204UURqUWyi7xWfVqc86VfTuBMM3jYqnKVRZKzYuqbCiTpca2zFpWejuUhjPe kXHBWOjS+9Wa1BRmFfWG1svU0Np9b2zC/CnYMyUTp8r92cejXvjPY0tfjUE/MbhQQNv7mKrFHZpd fybnf0Gdy4eGrH6UuNwJjoGcYtC00GHQWlxOyEuVORPtbSpWC/o+ypU8O4Y5TTvwkT56OAXbZR2N 7841p5X8VB46+Bz66Vf7PMnnePCpscHs5WvYXMmdX4MabtCTX7chn3IB2FaeQ0qhdrDicpmEqZZG qFGHAxPxhpB3A54MvmMDlopJdtEUHnQV9Z1Obg== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251227111826 20251220101826 38433 fpki-lab.gov. c5yrz0z/+gIvKxjuufDq2SoGq+mltFwNgqtKF86EQR3FdyOmqXsFmzR8A5K1gUnoK/3l42NpDahr +pxPddT0e1hqzyfZCg4puPS9RIBevSz26GyKbzt1ziNDmiEDkk91TycfBkCjPKbPDiipsDTSXVwi CJZHMEAU8n2iSWp8JEAaMFkX376DgATftTrYAJw5bWvUZuEzbIjWsryp9iIVONJVi4uOqmfnLWYz nc68KgfKegrNgj+B4jY+6Kf2MgT615vh50QhpCPzE7/VXCsH91KYN+gIkdKeBk0X7KIFh2d72/D7 xSfnZnSvZUCmlpZYHxr3oYSezEQ4vOjLLveXCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for fpki-lab.gov
	`fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc3kg6cPi9uUB0/2IGZvH79LhYgvfniZPVvKImYxZxYL4BWcs4E+Hv2GqU8M0rYhYfFhn1d3 eZbfXBybsWOBUHyVJXwhJZlHBJ8Ud9ANCJ65CFebGeecSsxfT0nvv26apY5zMQxU2nyUWbQ7vSnK 4qSpZRfRxGbem/4VrGTuJ58nog7XuyYLSGXeEqPtG2fo26UjGpUNLbqMurCy3wdmHl21VbM7VhYl p9NQwO++bEDpS1hsUOoNkbww4gNWqN8zQjgaKyUZc1DFb0b2mfkIO/4Qbi4u+Uh9v74sm++erLmI wc7HywqRQfvdd0sI2HyZ1xZJVlauyg/XkkUe7zH2Shc= ) ; keytag 29035`
	`fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbCNjou0CVWFCq104UMjYxv5hSlLSAEo7q6vSlXx5cTJnvrlrtX4R6e5pfqmkBP3Jr0847ZY pWcf/OR0lepRRVoz6ELAXpm/pOr11S8B14UhvewmtcIPSsCOZn19ggkHSkfyRJ5Z3l/8i+1galx+ o3NbKDNK+t3ISTa7PTFxvaWk7IgQvYE9fy0UKmIFFWEe4OM/7MCtVJkQfsp8foSRh8dIiIMvhG8S Ley8tLQs3zQoJJGxSH6nHgTkuLbcc1Nrwu4oEtW9txo7xXgpGgk6CLRIGI9IgmmXFor7j2uxupHX XSVOu4Qud27imlPD1KdwNUVsVNNhRXliyh8wujk8+V0= ) ; keytag 4219`
	`fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAYqC4Kua1w3rLM+MEc+nx4/WobwbdetCgigZ49oB1HufE4dQwaH975ftW3N9VbfvovoTmUEz XWeCtFFPn3Hala4BZ1YkVPqfrBSjQYhdHB+UskahY90YJnL+aIbMwgGOXP0KutYLVRjb/zOSIIsl Xtr/gjlaygoDQloBUuIcVuUaoN7X+aVCckGkPVIbWteIsaYf5+E5ofmP5ttn0RhxEym+uFcI07sH O2dwZu/EB9p7Cav1zn7CmzfaggGKgXFIjYjPIgKNym4xeDzIWCLbyUBGIrTjfUpXY9vUvAvzyAuS CgY5dnZXttfteL/OJkbDSTcQOZlwNSHuoTekvye0u3k= ) ; keytag 40410`
	`fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZkjnmZ/z15OEj9OQEPA89CK3lqvjLvKxLLU7SrVI1OchU/G67pJh6sgvuTq+LjmjYhkwG+0 dxBjWmcUPAG1VLFBUU0T2bWbKh3Xt17fY7u6uLkf/l6tnu7Ppt76ad4EPCD6bnjAQQSGWI5y5ntk yePLM4WpC01jV5UBzPuUkJ6lg/W37tPtOh1HuuCuuVswl/tkOPL0hwxBERs0OX7NhU2aAKLrkgEu uyKGxA4iJd4Db7sZUomw0eBzC/3qaujiC/woLl3WQ2itS2SDW/IuxF283y7iMXKxEQioGJCYexJT YwJwNTQqhialMOJpzH7s3u/CTT9BeXyOtKnOx3Ihy2c= ) ; keytag 38433`
	DNSKEY=29035/SEP is now in the chain-of-trust
	DS=29035/SHA-256 verifies DNSKEY=29035/SEP
	DNSKEY=4219/SEP is now in the chain-of-trust
	DS=4219/SHA-256 verifies DNSKEY=4219/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251227111826 20251220101826 29035 fpki-lab.gov. bHlYAbRdot7g2UY6lOr1y7567UE9e3Oardft2F4lzGsJm6+8RGvOqJ6Kmsxj+f7rLnBX38hmLRqy lhNk2/8HpmZGKxtQZ/m8UmI2TjrzZekEc4SauDZe1lWaKFqgMzok1u3yDcgUnwhxUger7l3G3iCw XxU+/QZcjPgVR5JBjtWQeovNgT5F3s0QC1fwHwqq6IA35l4QOczmrtzoAacWS5WG/CdUjrFjOsU6 A+UxTiUWiWGaJ28Sf/FrQ6iU60jL3ih3B+CY5HHNfWynluI8Qgr7y3mS1n8mJwGxUUHWEavloTzm Tbi8J7V3svwtPIYwZo9Dlv5Zu4K2JshVd1e9tg== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251227111826 20251220101826 4219 fpki-lab.gov. aQe6PlOga7OuAHILr6bAPbWlEakJ0CX4GFXYyu+aOlrqeWXsgwI3WflOW2hfvUgdxvGKb+EzoKwL LYZxkaF8T3HnYHb9Uyq13HvL01JuKTQsdDFGTCD3W12aXxA3kGihUxpXhMeLbuP0JPtpKH2nvBJF 2Y40C7saRJDdlHk87OtT0yWpUOMffX5u0OW/GZc+1HIiTeUvZi2yDGJa6aMShxOzazfS/XhQsiis WJ71HzDAO8mE8ZBcRzmqGc+vx9ipXupIx1tPcjP2YfU5j7eZXnbM9sDJ8mMDHNMiOp8PBB77+Hxz Rw8ew27ifMwcA/zDc+pHTy+3k/hDF3Nsbwpz8w== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251227111826 20251220101826 40410 fpki-lab.gov. B14DbbPaQFzUvmR204UURqUWyi7xWfVqc86VfTuBMM3jYqnKVRZKzYuqbCiTpca2zFpWejuUhjPe kXHBWOjS+9Wa1BRmFfWG1svU0Np9b2zC/CnYMyUTp8r92cejXvjPY0tfjUE/MbhQQNv7mKrFHZpd fybnf0Gdy4eGrH6UuNwJjoGcYtC00GHQWlxOyEuVORPtbSpWC/o+ypU8O4Y5TTvwkT56OAXbZR2N 7841p5X8VB46+Bz66Vf7PMnnePCpscHs5WvYXMmdX4MabtCTX7chn3IB2FaeQ0qhdrDicpmEqZZG qFGHAxPxhpB3A54MvmMDlopJdtEUHnQV9Z1Obg== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251227111826 20251220101826 38433 fpki-lab.gov. c5yrz0z/+gIvKxjuufDq2SoGq+mltFwNgqtKF86EQR3FdyOmqXsFmzR8A5K1gUnoK/3l42NpDahr +pxPddT0e1hqzyfZCg4puPS9RIBevSz26GyKbzt1ziNDmiEDkk91TycfBkCjPKbPDiipsDTSXVwi CJZHMEAU8n2iSWp8JEAaMFkX376DgATftTrYAJw5bWvUZuEzbIjWsryp9iIVONJVi4uOqmfnLWYz nc68KgfKegrNgj+B4jY+6Kf2MgT615vh50QhpCPzE7/VXCsH91KYN+gIkdKeBk0X7KIFh2d72/D7 xSfnZnSvZUCmlpZYHxr3oYSezEQ4vOjLLveXCA== )`
	RRSIG=29035 and DNSKEY=29035/SEP verifies the DNSKEY RRset
	RRSIG=4219 and DNSKEY=4219/SEP verifies the DNSKEY RRset
	RRSIG=40410 and DNSKEY=40410 verifies the DNSKEY RRset
	RRSIG=38433 and DNSKEY=38433 verifies the DNSKEY RRset
	DNSKEY=40410 is now in the chain-of-trust
	DNSKEY=38433 is now in the chain-of-trust
	Query to dns2.fpki-lab.gov for fpki-lab.gov/A
	Received 1381 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 1381 octets ;; HEADER SECTION ;; id = 62007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251231031846 20251224021846 40410 fpki-lab.gov. C/qHiDv3PVeriegrW1gWLhaH7bItv9njvRc1Byub20enIGFuYmsaf3fHbxQBYLKEeEG2/BbllbCW t3wk/sdqZjayamooNMh3wrGOPlV78MsmAKngFnpCRwMW7S0iFbkZ7w7f7kfy8CsNl83FEF/rbVps QL2gwLWix3u85+CHS8RXdnRzBnpSBlRnVY5b3m/wFf6/fSe3IIWTLhMFMxKNSW/E9NEw0XsL2mXt prkHAStQsQLJ+5ysf2pocoiJrg7YM4SZfJtKHhxMPMkOLWyxMZlkvbvMKJcyc9d4Dj3TgLA24TPM MYV2QDuatuWA4oXW11nMdi4GPDqusm+DZ+o+pw== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251227111642 20251220101642 38433 fpki-lab.gov. Mcc6ppC55XBERfHdQYEYFnbmxTDhucDOXpP/5SYR8uKwMqRSWthulZ8/Ej6zG9/FQyM7MwyURS8Q l3JJ5bJ5gpFsz0otUkYVIr4zPj9SgMaBQmihatVIyMqd47qTjCmibtJbLVGExuknxxT8I7eTs0Vo YQ3IlZvpakl7WvTGoqE3uRFw7FWaBHfZKO0MNJ7EYxV8cPSNvegsHAIA7PgbBJXMId1VWY5h0OgG CToWhPDRvjZMxsmOMpMNZCZ1x5Wh5aQcxpzn18f502WmpW8YMfvfTCPch7s/t3BeTT2SN8uH6euX U0Lgg4CUm78D3WjjOr6YIVuYBHkeljuH2gcP0Q== ) 2skh166jir3040i8n5iqivd15uqaovr6.fpki-lab.gov. 86400 IN NSEC3 ( 1 0 1 06a06eb771b8500b 2skh166jir3040i8n5iqivd15uqaovr7 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2skh166jir3040i8n5iqivd15uqaovr6.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20251231091637 20251224081637 40410 fpki-lab.gov. YxznQ9gC8Xw58W+PJdzwThF81LSVAaBmh16aGy8X4N9U59EJ7KaxR+nkbmZlTUy4LmPRTHBBJRJi Qly+kj7ccdFGbBqF4biN10LYh2Lr1TkRxLlgE88xCMus5YEuniIlKYWUBFxWMaQzaDSdLK4PQloO 7ayG2u7UDeZ9y3/71Pf2UvJ2+aV6ubqV8+rf9xgikcI5eCRsui6qtZtyD9UdH22YShDIjVorCgtz Z0LlDfdj/XfsRL1oGY6v8hKGI/xK2qZFCWQ328gmbGCF7lseT7GhcI6va1nuvq4QwRTuP3fBGvyd gwRLwGZ54xKaM1sP02rH9cUfRvwO5uErizTDRA== ) 2skh166jir3040i8n5iqivd15uqaovr6.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20251231091637 20251224081637 38433 fpki-lab.gov. dzdaEO7yK+qW14e2u09V1Az3WosT3qosk1KtWMESlaLOZlBdnoY/IAhXWEe6e/ZxbChR1YSYQY/4 2v/FGlRWPrD5LCoudMMP8I84F91Id0rGWMdzRUwdA9WnHjcmffzaaI9IKruDkeyCOtuPjmA2aR7C MMg/C7XvkkzbVoONPXqWcMtW0qu/faWyQEgeP5QS9LpekrGFmiPrA8amjffmdgib+bnZYMv0daId BUuv++YO9CWkkO1qLYzlwe/Y1pTHURtT+TVrnoI39vesQc0QCAdCLdwaddqF+OdTE2hkQ+CFEMEo jK+8gNQ+wSk47ElDMsqpBaBE4Mbudq2uhK37xg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.fpki-lab.gov is authoritative for fpki-lab.gov
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.fpki-lab.gov for fpki-lab.gov/SOA
	Received 3814 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 3814 octets ;; HEADER SECTION ;; id = 65299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN SOA ;; ANSWER SECTION (3 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251231031919 20251224021919 40410 fpki-lab.gov. KTwMwnUEMTcq2sHqsT4WLYx6Gwo3zCKjFUA/x2ShjL1FBQ7ej1cOl6wjcnHNUJNZIFwSOc6PxWhr +nzqUHyxSugU7yjJSYrKZAb8Qfq65/9FDnaBzgDc8Sb3UeYQUhdl5bfjpN+CtNaBcJ9Fjhs5ZgCH /f1qCZMtNfQO9oXuIfNYE67JL4eNoq7aoIxK9lQTtC3VoUQlxFJ+GzodkLnZvUNvIq1uYc7ipnsr AXVcNq/5FrRS9JoMiAMk9xUb1bdOOQkf6JgG317lfbxUXMk/0/V2Mu7uvqH02FGrTcngoZuNwD/j fGvl0UF0RNE1cb40kq3pwb/uMVVwZeyQw5pCHw== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251227111702 20251220101702 38433 fpki-lab.gov. jHwhYwSfK15e4wrh81W9Z2hKSv+Z6oeN9Zi1daru5nXU5XXyqEoGNt7ABlkVI1Jltv/EiFxK74um QihYWCxu1ACgmEBGOyzAAKzUjOe2j62PRJfNSDbQNvypQ5ivxb5UVKrQLkIOO94WnXrQqByaou2F /v+s9Vax20s2HweT8gbuXd7IijooCmjm9LMTU1WOpwCgskeEsRptIklwuYoZlQWkLKt8jMvfqneW 3KEvQBVbmscZpklINNU/X3ARNWD2JyabZS0iVwol/PveNquAJP3xvsju7AG9wBmIC+8VlCAA3Gp9 muHMFE1DK1PSN9zRT4jBAcHlfbzIMxwulSJh5A== ) ;; AUTHORITY SECTION (4 records) fpki-lab.gov. 500 IN NS dns2.fpki-lab.gov. fpki-lab.gov. 500 IN NS dns1.fpki-lab.gov. fpki-lab.gov. 500 IN RRSIG ( NS 8 2 500 20251231031813 20251224021813 40410 fpki-lab.gov. Vi3nZkAzhfQkV81mFTFspgGXS4Oxj10S0qUBgWQaJtTwy5JQfTUn8gvsIkvEPPdnIwz2/CUjc/up MXCUxHe3GCiJshaHfzi9It9A91xtohtdI0zhqSXOHd5F+1IOhhpXqzvEOLuHpuc9AlLMBLBgWWLL a/ylJj4mSMGJuXb2y20z1VWn5Xm3sJ41y8Wt9IgKbcZ/SleM1tD0TuUuRfmQQcokORoSs4QcMiis LOE4MUhAr5omB8GzrWVoOLhCtribcC1HmcLewfoi8Z3idT7akv6gZFndWx+tc9B56mQEKu6KlH0x y/IaqFp3sgyhzK9pl+V53e1ydi/2MCGJFettDQ== ) fpki-lab.gov. 500 IN RRSIG ( NS 8 2 500 20251227111732 20251220101732 38433 fpki-lab.gov. Qg1wZxFUBEijRT7p48gzfjr5iVEhLb5dGSERXqLWsHQ7F2dwPWzqF4vk2bsvVizpGwOJIfyXPAFF E3y8ZWsWwxx7r2XRX9ZTQoYv5/oKANTOWRuS/ajKiy2Q/AAGBPv02iDDeVTm6WgXfQLFDQ7wOlM7 oVlUO/OXgtpTJ8pV4FfzYJ6DstxIciOfs9BJn5Jw8FtEP0NhwYGizqTqiIpRPwEUBDZZ5SSKgh1Z bmopOj3pOGnq+5+2OWcs+PT10RlcpWloMYI0P78zs+RbbLDHaWn6pui84jm6+ZR5sSp27uuCkGHB 3KKPGSPU5GcNBv32Jd90kjmMkOipU5OIH8xtRQ== ) ;; ADDITIONAL SECTION (13 records) dns1.fpki-lab.gov. 86400 IN A 199.167.92.100 dns1.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20251231031813 20251224021813 40410 fpki-lab.gov. KeL+eT4rUKXrbg2YL24YDYmuDG2YVPcAxK9rPr8zGNsV0ou+SwY4TwGn714z9zWDkQSR9KYv6Gmi Ai++vS/fjijq4rriXUrDkn2GuYWQ2aU4OfObiyYSbSoD0lUr69kPjFDHHoSC9z/c+gneEw3Crr5s OZNPIzx7dNwcOZB1G9MuEIomjaIqT01cIG6EznqF4BZnmTGjuD1FwaJ4BhKiGZXkeC1AUx+9aXgB 2YgjeSdlMQ7WqndnmdZ2E+cH+pTbe2jNRDYhcv1OPN/XKlzAgcegzF0vrZkNHk0lKCw8smy1NOKr 56HEqbfgrD/FwC7t1RxwOJVhU3kjooLmOMofrw== ) dns1.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20251227111732 20251220101732 38433 fpki-lab.gov. bXlpZEdeiI/H1s5W6MBx38RRE8Ml99G759W9wTk5UZ+N19H58gs5wIpxl9do/3n7JxjFcKJk4nzs WzcHJ1przaOmxgkDab3yr8505cnAb0En5uB70i7gyS88of9aApNTjMrHB+7OqKsNex93jJCYSxHX dEaLlXq2hccX9si+JgpLC+lgaBi3Jjw2wWgqSXbCF7cWAZ30x2tIWkVcuMM/buzsyiqB4VuoWjml cNTgBXGBdhJCKL1NFvOYj/VGYjZM9fDZx5XRnQCO/O2AZx4nVWf7kJh+EFFO+/6cqUrcaXbJtR7l jKc6KuydEGYSL1SZKh7OlADytQfEBubWLB4pvA== ) dns2.fpki-lab.gov. 86400 IN A 199.167.93.100 dns2.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20251231031813 20251224021813 40410 fpki-lab.gov. IZY6CenLfeM5C2t19nh3xCQdZ+RgeyrS1qJKRA1HHnt4VcJz/EOI3aVoDnoJdF6no4Yb81YI9gFh 1e3FhElmkzg0tGB7xlKO1g/OGHeMUlBUT1hoe42jKRRwRM6xXRCvHdmYAJWOXD7L3jBgVdnGg5dX wddxds2WarRHjz7wFDsiugWV5L8CEHgYgp40AWzLv2k11387vNzgxLMckusVp3n4/sIlo4d+u5CI W9fa13lNKnEHZgQBChiRRcbGsRPDU64i7L76O2W+ZewlRptAyaCntCNw5ShTlk5o34TT1NcblDsT DB1/WN4PSszBLDURtR6KVfhgIjt+ogqasmcHSQ== ) dns2.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20251227111732 20251220101732 38433 fpki-lab.gov. Q5Xznrrrk6AAXU5hKo7bODYPdZnqi25ZI5bozDy24XNSd3ysljjU3QkD+RUCHkhLTaWNtjX951Zi g4jgMuZCXwWeWpfWg+hPiWYErBSC1xsAH8sPRE2EW6uXBxAS4PZ9N0qWUW8lghFYFNeAj6EjFndV kcHcFNyEzYLTJLw8qUwl/rsgmXyLdwfeXvvEUt7MaQOKWZnh0aLYrBVa9vxUR7x4UkB2mISA+kSq TXZ+g1uZgPCKYK5lwmSVrKhesPzuucwwl0Y1ccl6awnIa8l/njmc2th/fxdotEphbgIP9kppHXfJ 0iDmPmr28Duz467ItnJtGyaNtERkDw38kYAmzw== ) dns1.fpki-lab.gov. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns1.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20251231031813 20251224021813 40410 fpki-lab.gov. YBv/ADuN/jB5JljoAQwuOuGxcttpfTKh/u4Hgbrn+3bkJXK81c9LjCwzNGOPd1ARauwyRJuk8Aez SBNiblK7+F9YIPeSIE7PIKJRyW4WtGfp+E3BdbLzTe0oMz3pF8hG0PKDSHF1HTlhzLt5Go0QIQLk KE+s6lkruILXM33U8nRkkw4ULGqG5V+W+7ofiVaLiSimyJDCTnHT1Ch/rZHgNSqRhlyqKGL1yCeP 4oPvZKLI61d8LqELiKNSaPTUQRlBAWxKpZ0T6hSciU9QlXB1VB6FbEf/V8sm+shenSEsItoziNkD 5SsVayzRQLPiVPusXVL91z5cUxmQDTkPjLvLKQ== ) dns1.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20251227111732 20251220101732 38433 fpki-lab.gov. H1QTtr/ePkBqfvH/fGh0nQ9lZZud1tIwLpsDHjI4rqSUwJybkzB8srvIEclWUNFjhntfXBcL1XUN eynB2vNbb4nP23tMX5aRAkwx38HOjlqdZEJKRUacDnXHftqK2iXPvyBnGc6A/Ls7K1dKoGi4I3aO qcMBd3li171xcfGu+NcMJnRv1nrA2jmpyTYYTnh5AYgy1D7O7OezVNmhLHvthS4jHciRyZ6+gMqk XhOIwvxyyWzUpPbOtueGyvHRqpsAVZyhMzP9JRowGID8rGq0BoRqE9lgZg27xA2MZgBEbC6h65eW YHxP6ZVVqNCZUdAcskDoBpf9HYzWpAXfxFnCaA== ) dns2.fpki-lab.gov. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns2.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20251231031813 20251224021813 40410 fpki-lab.gov. Xx68bKP7c/OpNDbdYGWWuXg8A7TEkoo4+cr10Wcmjg2LQzTkEiFv3vys8ez3vq93W8EB5qcDdTHR 3KTUGlRM2pq2Mx+jp5tb0AF4y3yiZRgG2syspdjq2KXNFMZOde7pCctnV04bhiqN5aNJhqjW32iF BbH9OAv4HRh5quUupOIky2VOD+wpR6fUDb+5xhqspYs4nddq7cNLF/720TaTx7lH0XNvjW2R8CCA amlnUrQrbJzr2gloZuoDtppQGCJ2VjIFBUZUGkcGYhLLBvehWusSFbOniN8c3A/fOrxwPC8ehU5+ 5F31MvC7HjU9lsk/43om/r3oIQzS7r2bW6ScSg== ) dns2.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20251227111732 20251220101732 38433 fpki-lab.gov. cxmeTbUbSKUQFkfl6Xfs9YHU23Sr3EkEgK6Yoius1pmoJoycaJ99f3tOvKgwDAkhSIjULK2dP0aY 5QhQSqkV/aspgMQUHyk0gdBCAxEjR5edXvsLQI5Job3yz3+mFusV2o99bgbKKgYDXYVeYnDRHaCb yraPLn/GOg1A+v4kWoNhagtV5Vs42uTzLPXGcB0K3th+JRACAyAlV5vnHGR/3AIiTWmcKLd/Tsyz jGqDgazva2zLk3l8dovk2/lO91TxeakuxijzMleAe3xr0w2v4baD2nPSxDS2oxaHMkCFqIEAGJEe J8rWtYvSSCuNrKs4bc7btPoGOeNWkNsBlxxSFQ== ) ;; { "EDNS-VERSION": 0 }
	Query to dns2.fpki-lab.gov for fpki-lab.gov/A
	Timeout querying dns2.fpki-lab.gov/199.167.93.100 for fpki-lab.gov/A
	All Queries to dns2.fpki-lab.gov for fpki-lab.gov/A timed out or failed
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251231031846 20251224021846 40410 fpki-lab.gov. C/qHiDv3PVeriegrW1gWLhaH7bItv9njvRc1Byub20enIGFuYmsaf3fHbxQBYLKEeEG2/BbllbCW t3wk/sdqZjayamooNMh3wrGOPlV78MsmAKngFnpCRwMW7S0iFbkZ7w7f7kfy8CsNl83FEF/rbVps QL2gwLWix3u85+CHS8RXdnRzBnpSBlRnVY5b3m/wFf6/fSe3IIWTLhMFMxKNSW/E9NEw0XsL2mXt prkHAStQsQLJ+5ysf2pocoiJrg7YM4SZfJtKHhxMPMkOLWyxMZlkvbvMKJcyc9d4Dj3TgLA24TPM MYV2QDuatuWA4oXW11nMdi4GPDqusm+DZ+o+pw== )`
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251227111642 20251220101642 38433 fpki-lab.gov. Mcc6ppC55XBERfHdQYEYFnbmxTDhucDOXpP/5SYR8uKwMqRSWthulZ8/Ej6zG9/FQyM7MwyURS8Q l3JJ5bJ5gpFsz0otUkYVIr4zPj9SgMaBQmihatVIyMqd47qTjCmibtJbLVGExuknxxT8I7eTs0Vo YQ3IlZvpakl7WvTGoqE3uRFw7FWaBHfZKO0MNJ7EYxV8cPSNvegsHAIA7PgbBJXMId1VWY5h0OgG CToWhPDRvjZMxsmOMpMNZCZ1x5Wh5aQcxpzn18f502WmpW8YMfvfTCPch7s/t3BeTT2SN8uH6euX U0Lgg4CUm78D3WjjOr6YIVuYBHkeljuH2gcP0Q== )`
	RRSIG=40410 and DNSKEY=40410 verifies the SOA RRset
	RRSIG=38433 and DNSKEY=38433 verifies the SOA RRset

fpki-lab.gov

	Query to dns1.fpki-lab.gov for fpki-lab.gov/A
	Received 1381 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 1381 octets ;; HEADER SECTION ;; id = 33446 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251231031923 20251224021923 40410 fpki-lab.gov. Ilcqu8y+21oFLudkId2hIb2ziequPj0ZxST9WsPpveJY4A741z2EZK7VpgRfJvFxx7EynvEBFBdt ACVKQ1RqwzLlkhzG6NBuM2gP39aYDFuKru3mD+OduJ3yVmZiD6bU6OmnjUi4YdHaTdwVOCZMvNN8 dRFY+uwm8TMtkNCGSCh2aYyRw0HKHclPzyW+PDszwMP7UgGWhxb2/WJOPr/751hlswec0+YVEEDB afpszwshAFdP465GG9ugQBrbsqDnoPknusqiu33/tFvXNQ093dVqSvC/QC/jYHdXVToeaZrcy/2j lwpgH0Mg1kxpISNoMs6xydp9oJ7+8OFmIGecFg== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251227111739 20251220101739 38433 fpki-lab.gov. DIA6DkLXGiYx3XzML/3xtI1tZ3kPWKS7AqGmy1+wH8fpoM2eHORhUUzK/JGgwg0nxrL17GnZrJTT DKg3sVYCjp4bFf3AzvKNfj3/51Nj786BW0/12vbXhy0YTI4XC81uKu9aUN5w/08udGdl4VKD1qPw E0QowetP+1rW41bB21QXvYTRdzNeAXwLAbZAJQbSB8Ii8t+6kWg6Osyi/TPmMaXAPDwzEW9hPU5c sRmm8eGvigQry2qdCr9Z2I24G37Yj9F10dbLLW4iBz13effq8XOL0bazQ91wdbm0gnjwy7c9oDIh Sav7IxQlesuWotVRh3izUP6QhzN7goX6DUNGUA== ) 5kqlikhq8kcj0hv78k34nik993r8bhvd.fpki-lab.gov. 86400 IN NSEC3 ( 1 0 1 19c5222fcf884be9 5kqlikhq8kcj0hv78k34nik993r8bhve NS SOA RRSIG DNSKEY NSEC3PARAM ) 5kqlikhq8kcj0hv78k34nik993r8bhvd.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20251231091642 20251224081642 40410 fpki-lab.gov. Px1azI4fy44gnmPYIcPQcTA4F3mhqQaF164OPoN6CjKY0wtimpxW3Zt+14g/GpWnXdZCBgM9Hyzz vBwgRBfimjXikBUuIGmK3DMXvewtISg82wHxEFHP6+m0hIdVgKDgr1SgJ/bhV1pMCxczjfc3rHqu hW6Ow4AiFjELev4S1U2HCLwRcfwlBDeFkH/9uHbSqaWZx4jytVwamVTtInmegQoQOxb9g+TNieWj 4NOjSXidmxAJQsS1ehO9jp5hyvNIK824bY1EbxJ1L4YGYd6DDnRuB6lL8e7HX+2ccoGxdZbQBTHi RmYwNlyMrOnJsZ/853ggqu8HhYPfVzCr4UojSg== ) 5kqlikhq8kcj0hv78k34nik993r8bhvd.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20251231091642 20251224081642 38433 fpki-lab.gov. MgbVVJeMb3zFZrY7dC2yVHJrm5TXBxB9qgQPEqm/LoNlD7BuYO+4JWjyWZy2wuWtAdpVOTTxJBza sMQn1uZisM3g+zeU2gBIY0IPFw5xUzZdElu+WAhBrsT/pHLScEUnIziBh014NZdbufcoKnS3exmy MElfyNME0f0cFUrlBUMOUdjv1EwT/BISBtuhQqvBR0UiRnR0XWy0zRBT4Ab79i4dWVyQ4bixEhuh OXnUSPJOWLWKlTRcpLYewCl9rpE7OYPS2LcltH6V2JsGe0ZoUakqMKNEktsZCfeSgBWxkoWvF9YV fDeayjY+HdErJSPixsWLR94oczRAyBP1a0f28A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.fpki-lab.gov is authoritative for fpki-lab.gov
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.fpki-lab.gov for fpki-lab.gov/A
	Received 1381 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 1381 octets ;; HEADER SECTION ;; id = 32705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251231031858 20251224021858 40410 fpki-lab.gov. OIPIDDeEbNLvGIK+mBrEFPy/dT9TP6cyKq8lUkIZrdwhIcZfnnaEyOeB/ZUgcjs8m06TLEroBNfi +Pbb5B4NMADdBuPC0BLkteKmBqR+TcxKT/nMP073MlEut/Kz8e8tJFLiXj2xqRo/Nh+OvwIbV3aY mdrCwLCkZxmIDVCBwpVyyzLaNX7inLFoMgv7r4L9xcpxVNBo/tMTB8a/NyszPHTc3fMp5io1Qbbr /BW+sMJ4ZBi8bduKsF1At/vOAi68w4nmMd7FYzEIWIEZKEKp3X4m78GSZjRymmiX7dTOCX6N6ZIi css3zClsYEhyxovHl4r6FkKrXNazW3v9Yjp1Sw== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251227111707 20251220101707 38433 fpki-lab.gov. lzIQjPaDN1E0c0AY65wU/zK+n6a7igcQgP8ZABU47/qYPQY9OP1NRwMrUOof85n2ISh+pzPUymsR fLopGCvZdNzFdLKoxgQHAElg+4oFZfkbC7emH0JTm3LM7oG/7Xr54wrRUU4/tUyRtcFBVdECSLPm 7w4GduGjwIx0EzJK3K0Mo4zd4ex9skyrdW15kMkLhA3iXcuMAeHtYpTvRk5tU5A+TPRPkva6ItsC ipSJM7fqYHfLJ8aUZ33SudQ4Apu7tf5JeCK1u0u3cYGgz8DNpIj4swIGLMqjkZ5YyLB3Fz+8ZMrr 4UQSbU7erPvg+7BXl0d5NHo2RSfUoMghx44m6g== ) pug8dhg2ujcmal9cjihsh2ikqknlhv0d.fpki-lab.gov. 86400 IN NSEC3 ( 1 0 1 49f7bfabe25be872 pug8dhg2ujcmal9cjihsh2ikqknlhv0e NS SOA RRSIG DNSKEY NSEC3PARAM ) pug8dhg2ujcmal9cjihsh2ikqknlhv0d.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20251231091642 20251224081642 40410 fpki-lab.gov. f7f58A6Dl55Gjx7qLHpaY187vSimNkYwhcU3EAwmULiJ8rbRhzLjXmvVfnmu3zMcCx+m90vgYJho iudPTIqLEcyOVAKkd7Iv8m+bIfFV4ciJOsOKSe7hwTchPOhz9n9mx6bTMr5sA94GDbljKK+0xKhU 0z+8jDHIYyzvcH5I2w8IPi9HfrMiem4LAGHCZlBNZxs/lepXL6KXQchTa+FBdsoRD5wOFLQOjRcl sPwlCs3+Vfx/vJl0tjx0pRWl/uHB4DboacfyNT4bjTuF9LbvZOkzxec/5GS6BoqqsOLcyASpAF5d IUTa10t8EePoizVSAmiZFxRJnrzdp8N9xNOd1Q== ) pug8dhg2ujcmal9cjihsh2ikqknlhv0d.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20251231091642 20251224081642 38433 fpki-lab.gov. MEqvpDAoBCbzr+w/P4pNyrv23bRnAf8WTDykb7k6FgJ9CUX0WWFR4l0/hxZImVLeTYaQk8ZZY4kF 0mH6LG2mRXUzKiunbmgpJl0UQEsBBFZdYpnM4aQcXzpfJarHAfMTUuDSHBSYDmwKKRBcCQCjgfyq Ci9Fv/paD+AWhBqQWN8E+STdNQggsvjlo6H3WXN3uDBsYghwZX0LHgasfzVrEQB869PiaJ3EFew0 +kybnuk133t6H3e6beDCzNwaufvRo4gOcyHFWBCkoukznzv0LCJQ3cM82cIGOAhN9fMT06cqhq+v koogwC54e3//Mpg7cKYx6ArlOXvY47abTE2+Zw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251231031923 20251224021923 40410 fpki-lab.gov. Ilcqu8y+21oFLudkId2hIb2ziequPj0ZxST9WsPpveJY4A741z2EZK7VpgRfJvFxx7EynvEBFBdt ACVKQ1RqwzLlkhzG6NBuM2gP39aYDFuKru3mD+OduJ3yVmZiD6bU6OmnjUi4YdHaTdwVOCZMvNN8 dRFY+uwm8TMtkNCGSCh2aYyRw0HKHclPzyW+PDszwMP7UgGWhxb2/WJOPr/751hlswec0+YVEEDB afpszwshAFdP465GG9ugQBrbsqDnoPknusqiu33/tFvXNQ093dVqSvC/QC/jYHdXVToeaZrcy/2j lwpgH0Mg1kxpISNoMs6xydp9oJ7+8OFmIGecFg== )`
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20251227111739 20251220101739 38433 fpki-lab.gov. DIA6DkLXGiYx3XzML/3xtI1tZ3kPWKS7AqGmy1+wH8fpoM2eHORhUUzK/JGgwg0nxrL17GnZrJTT DKg3sVYCjp4bFf3AzvKNfj3/51Nj786BW0/12vbXhy0YTI4XC81uKu9aUN5w/08udGdl4VKD1qPw E0QowetP+1rW41bB21QXvYTRdzNeAXwLAbZAJQbSB8Ii8t+6kWg6Osyi/TPmMaXAPDwzEW9hPU5c sRmm8eGvigQry2qdCr9Z2I24G37Yj9F10dbLLW4iBz13effq8XOL0bazQ91wdbm0gnjwy7c9oDIh Sav7IxQlesuWotVRh3izUP6QhzN7goX6DUNGUA== )`
	RRSIG=40410 and DNSKEY=40410 verifies the SOA RRset
	RRSIG=38433 and DNSKEY=38433 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fpki-lab.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: