DNSSEC Debugger - fpki-lab.gov

Domain Name:

Time: 2025-09-18 02:06:46 UTC

Analyzing DNSSEC problems for fpki-lab.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1414 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1414 octets ;; HEADER SECTION ;; id = 38482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for fpki-lab.gov/A
	Received 622 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 622 octets ;; HEADER SECTION ;; id = 49108 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250930170000 20250917160000 46441 . AwbNY+voMl1OUTjSvUErAS5G/ScBk7y9kbl6u+4NsdnPdJe5RsPLVUMRn5bLmCFkT/13f+CSwvPT P4HvbqtehnLMfpwXI1tXWoZBdwbySOQaMWoehRg6BXlpIEQDdTMEcm0Um6Q0d2Kd0C6Myjrx927O nDxSkBOLcggqZRZdvFw+VPfPo/LJxi77dlNLKYAE9FFLotskc/dIEmEaArEfwud7prMIlu87iLAn XejqdNM8qWfccK5/AGjgYfvzKx44a3iCT2yT4kapWNeYpEep5a0pqQMBRfLMHlWmGRqcGmBlkjaL 6mPI4sQNxG8IJ1Pyf0i3QODtlwZ5l5Wwmwr7Lw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for gov/DNSKEY
	Received 610 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 610 octets ;; HEADER SECTION ;; id = 60423 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250930170000 20250917160000 46441 . AwbNY+voMl1OUTjSvUErAS5G/ScBk7y9kbl6u+4NsdnPdJe5RsPLVUMRn5bLmCFkT/13f+CSwvPT P4HvbqtehnLMfpwXI1tXWoZBdwbySOQaMWoehRg6BXlpIEQDdTMEcm0Um6Q0d2Kd0C6Myjrx927O nDxSkBOLcggqZRZdvFw+VPfPo/LJxi77dlNLKYAE9FFLotskc/dIEmEaArEfwud7prMIlu87iLAn XejqdNM8qWfccK5/AGjgYfvzKx44a3iCT2yT4kapWNeYpEep5a0pqQMBRfLMHlWmGRqcGmBlkjaL 6mPI4sQNxG8IJ1Pyf0i3QODtlwZ5l5Wwmwr7Lw== ) ;; ADDITIONAL SECTION (9 records) c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to g.root-servers.net for gov/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 50396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250930170000 20250917160000 46441 . AwbNY+voMl1OUTjSvUErAS5G/ScBk7y9kbl6u+4NsdnPdJe5RsPLVUMRn5bLmCFkT/13f+CSwvPT P4HvbqtehnLMfpwXI1tXWoZBdwbySOQaMWoehRg6BXlpIEQDdTMEcm0Um6Q0d2Kd0C6Myjrx927O nDxSkBOLcggqZRZdvFw+VPfPo/LJxi77dlNLKYAE9FFLotskc/dIEmEaArEfwud7prMIlu87iLAn XejqdNM8qWfccK5/AGjgYfvzKx44a3iCT2yT4kapWNeYpEep5a0pqQMBRfLMHlWmGRqcGmBlkjaL 6mPI4sQNxG8IJ1Pyf0i3QODtlwZ5l5Wwmwr7Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20250930170000 20250917160000 46441 . AwbNY+voMl1OUTjSvUErAS5G/ScBk7y9kbl6u+4NsdnPdJe5RsPLVUMRn5bLmCFkT/13f+CSwvPT P4HvbqtehnLMfpwXI1tXWoZBdwbySOQaMWoehRg6BXlpIEQDdTMEcm0Um6Q0d2Kd0C6Myjrx927O nDxSkBOLcggqZRZdvFw+VPfPo/LJxi77dlNLKYAE9FFLotskc/dIEmEaArEfwud7prMIlu87iLAn XejqdNM8qWfccK5/AGjgYfvzKx44a3iCT2yT4kapWNeYpEep5a0pqQMBRfLMHlWmGRqcGmBlkjaL 6mPI4sQNxG8IJ1Pyf0i3QODtlwZ5l5Wwmwr7Lw== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 41471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251101110613 20250901110613 2536 gov. D1H2/lQxqi95pn45IcLLiEhJqLj7xvGsuBj73AYEAzqX48/P7GQMRCj7rQAOTEwKoZaj70cVbIvD dPV4T5L9mw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251101110613 20250901110613 2536 gov. D1H2/lQxqi95pn45IcLLiEhJqLj7xvGsuBj73AYEAzqX48/P7GQMRCj7rQAOTEwKoZaj70cVbIvD dPV4T5L9mw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for fpki-lab.gov/A
	Received 362 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 362 octets ;; HEADER SECTION ;; id = 18018 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fpki-lab.gov. 10800 IN NS dns1.fpki-lab.gov. fpki-lab.gov. 10800 IN NS dns2.fpki-lab.gov. fpki-lab.gov. 3600 IN DS ( 33856 8 2 f7d2fbe4dd1c3509e51db4428691b627a85d347b082b0afd0d1739705d07b681 ) fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20250919030646 20250917010646 35496 gov. Fu/vGyYRqhx4yTRM+hDwBw09Elg1O2K9/3NxNbwVRPRK1lu9QHLrv+2qzuApcvJgWxLbVR5ecugu y/H+ApoGYg== ) ;; ADDITIONAL SECTION (5 records) dns1.fpki-lab.gov. 3600 IN A 199.167.92.100 dns1.fpki-lab.gov. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.fpki-lab.gov. 3600 IN A 199.167.93.100 dns2.fpki-lab.gov. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for fpki-lab.gov/DNSKEY
	Received 362 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 362 octets ;; HEADER SECTION ;; id = 65091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fpki-lab.gov. 10800 IN NS dns1.fpki-lab.gov. fpki-lab.gov. 10800 IN NS dns2.fpki-lab.gov. fpki-lab.gov. 3600 IN DS ( 33856 8 2 f7d2fbe4dd1c3509e51db4428691b627a85d347b082b0afd0d1739705d07b681 ) fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20250919030646 20250917010646 35496 gov. kSr4KdTV2kKIhOeDm3A6hgKtXoQXlZgkc+2YL6MPNHA3CvINHoN+XGTeLEu4Lo8VIaJLykqpeFvG MywP0kvi8g== ) ;; ADDITIONAL SECTION (5 records) dns1.fpki-lab.gov. 3600 IN A 199.167.92.100 dns1.fpki-lab.gov. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.fpki-lab.gov. 3600 IN A 199.167.93.100 dns2.fpki-lab.gov. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Found child zone fpki-lab.gov

fpki-lab.gov

	Checking DS between gov and fpki-lab.gov
	Query to a.ns.gov for fpki-lab.gov/DS
	Received 236 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 236 octets ;; HEADER SECTION ;; id = 39954 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN DS ;; ANSWER SECTION (3 records) fpki-lab.gov. 3600 IN DS ( 33856 8 2 f7d2fbe4dd1c3509e51db4428691b627a85d347b082b0afd0d1739705d07b681 ) fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20250919030646 20250917010646 35496 gov. 3T+TNN3jpbE7oHzBw6LyInqXFBocqflCoPFwmGZ2gw/tq7BfyLIh1NaEW47TlwCOsUIzoFxawjtS trPS09hxyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for fpki-lab.gov in the gov zone
	DS=33856/SHA-256 has algorithm RSASHA256
	DS=4219/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20250919030646 20250917010646 35496 gov. 3T+TNN3jpbE7oHzBw6LyInqXFBocqflCoPFwmGZ2gw/tq7BfyLIh1NaEW47TlwCOsUIzoFxawjtS trPS09hxyw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=33856/SHA-256 is now in the chain-of-trust
	DS=4219/SHA-256 is now in the chain-of-trust
	`fpki-lab.gov. 3600 IN DS ( 33856 8 2 f7d2fbe4dd1c3509e51db4428691b627a85d347b082b0afd0d1739705d07b681 )`
	`fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 )`
	Query to dns2.fpki-lab.gov for fpki-lab.gov/DNSKEY
	Received 2345 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 2345 octets ;; HEADER SECTION ;; id = 15738 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN DNSKEY ;; ANSWER SECTION (8 records) fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbCNjou0CVWFCq104UMjYxv5hSlLSAEo7q6vSlXx5cTJnvrlrtX4R6e5pfqmkBP3Jr0847ZY pWcf/OR0lepRRVoz6ELAXpm/pOr11S8B14UhvewmtcIPSsCOZn19ggkHSkfyRJ5Z3l/8i+1galx+ o3NbKDNK+t3ISTa7PTFxvaWk7IgQvYE9fy0UKmIFFWEe4OM/7MCtVJkQfsp8foSRh8dIiIMvhG8S Ley8tLQs3zQoJJGxSH6nHgTkuLbcc1Nrwu4oEtW9txo7xXgpGgk6CLRIGI9IgmmXFor7j2uxupHX XSVOu4Qud27imlPD1KdwNUVsVNNhRXliyh8wujk8+V0= ) ; keytag 4219 fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbq2nguAgQ8KlBwbuvfaw9jKQKsBQO70CWfGvUjE/UlgEINSbJtEBhUpZhqFXI68YReH6EHZ u/0J03peGNevkzwDVDvfrVPijBTKMHcBTWrCJHY0uzwgyXmfD5nRDmdh0BRdH1ZAkUOq49exXmG9 Q4XCd8siO+st0SdWgyfLX8cDhtKaMPrQkLvVP71wBG3ShiudZR9CiukkFIiCJ5K06tYi4Z1nCpuR 5StzhQ3EXG8z+YyJJKWvLE7dECgDW/iEj2WI/UcJAnJFuldEsxYQUVVZOyXUD7WwSfvHTBFH4cpM 4Itzi9DBOfYYxSj9VSNcFeDjdP2h56axSbaBhL/6DYE= ) ; keytag 33856 fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcJZ7fIMnn3G9L57f90VTAItrr3mgRby4Fo9I1GqqPxn4H/ug2IoarfzQFiNK340++5VcpXC sIm9cKGQBPBhrWa3XRerZyzOtE6mRTVqYOLv2JbLk6ix53kF11cGAsQ3hDB/FGD5gF0anMAgJEVl ogsOh9uqEZnZyJAPQXXm/P1l3fMAOU+Jo0/aEY9X5TaXTW3pNPEO4d6++ZaPb7h0EbYAYJ+qkGlF P4ah7Onoq8apH3MUxVbr72Bb6TCYTUF3Hf04uqPuW/xhKXYkvOc3e8Z5fI8VWuXTy03zFC/ItcrD 8OSgSO3HMwhzgbFQmDyNtUlPA/arDxjjlaSnXR8lklU= ) ; keytag 60360 fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaI62lgkeJ6v9861JHM4t+jKyBno4ra9FCHT/dtpOH5ZUIcQClDjGwafFCwz6MSr3Nqb8A15 M8LO+K116Gk9Iz8w6z57/PyQ6WaXyR0/pSIJp0glmHvQ6mm6OeUhNRJFdLT/yJHBLpgA1irX8CBY W6x+LfFAsylQyZ5IIW0k31nDRXd+p3/CCw0uU/TakHzCY8BRvOA2+zvVLNKhnlvxlVFb534+JCeT RArnhfwdLNWKrI6IXMBBRGUcskaXKrO1Zyh0kpSEtrnhgUKTcwV2sQUyvfnLXxAUha5WbylDCjtl tyOgmywU3W7asIBXvvgEY9Vsm3hNyijBbTiZTycjV3k= ) ; keytag 23286 fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250923191703 20250916181703 4219 fpki-lab.gov. AylVd1AAKf+4Ch6P9ZB4HjASw90PLHBg9vfrplG7MH/agJSg6mU5b8wGI8OQBZvfb/uQuSwC06UI 0Il3mHHA0ih1QM8oFgm7H193QTTvnyJM7pLnsNFsoVeFqYUwHBLXQ6rOKUcdeCMA8KtnJ80mCwAj 49bXtPmBSYdXhZCP46Nb1A1lZB4ypPzBjg2IlcTZp1bpu5Eu7QzXU0XrFeu7K5eqaop8smLMXBiL IQI5OaOioOQtLBJrgXBpnrs2SLiMrX5b9Qbp+a8dt7jtthe2j+A7uuVS6uG5Ps0kLEbAdq/dLK9z UGQyxa1j9FTnV1pscXClr5nSXKDAyYXN19zSTg== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250923191703 20250916181703 33856 fpki-lab.gov. Bhp+yuGq+ejygWLmHanS99ZN4UOVruThZ4WvtK9voPWbN1qBwXGINEpGJ/q2epIgau6zL7pKgV/M BeD17t9CdBkPmMhQvyNkEiukWFgHlkKMktJFaL5RqGVhyixe8UqBB0aC1fEGFXBvLwtnk6LmSVgE QSAxsavWGTSmDNuAMwf04Xy+sgETdJviw2YZgW5/v2DrTk0E7mLrDPMXaAcBFUart2h6cqybCx3Q XIuKzOx/UKdba69J4Rx3PznJsQuRHhGiFzjyvo+JgTk7Ed7dvGYE02dkUbgOsOC8kb8t2367W2hd FCHzolHhsYNWleyH/QKITu+w2gAlRFXuzfGBBw== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250923191703 20250916181703 60360 fpki-lab.gov. pjxYq3RRea4wz60nAxwzNSvsvx+HS5WjxKnro7TRLMm5dZ/m6y/ewrR3zRuC0WI8RN9Bij1eo4uq B1Fh7OHVMvWwIy8Ln6AHv5R1TtVfQGEh0XlpYL5MTWZTIkQ1vRImQrcuGm1vU025lQI8EIYekzD/ G1LFOGkLEANcWmhuvZrZ95cjTDj1Y0cNzmwr5BU2WPuIb/HZEFrmhiu07em+DLL76/4ACKlSTsHr RhdByluY27Er92xctQNiT/hZLA7m5gvKO1sXkGCQit9xig3hF0WxxZ86+2HhJguDvZsj+2IuGS5T Ud0EnqNTC4yY3dSTe7FgX32TGp4MYaYtrxtYmA== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250923191703 20250916181703 23286 fpki-lab.gov. RM6t8QHVwVZ2msF7TyRgz6CYv6IPxLAGwttT2vW7Ku7nFQzcUbzFQyJk+9xUXikKsx1JuKYMAd3I WLjss45ZKEjPmAn3+3jA5KCAOTQA+KNEtUZ6fy0LCQXHsfg5X8zhmhlIImz8gZ+nhk9q0NYc4Fg4 J/tzp09/NQWv1NZRssPzAnAVLit1JnSk11iSbOfozWGqBtYUGHVzcHErpdDDBLVsXpFtDHx4iEeC y81iapPc+wf2NrSE5QwM9MrsnfqB8WQe312mbbF+x9rhuYlRkMrmh8bY0PSoiFIDOMEsgwNoYT07 EOPTJ3JbWGTA19Yomkfbiy2g3Wf3uAZ0Q3Dy1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for fpki-lab.gov
	`fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbCNjou0CVWFCq104UMjYxv5hSlLSAEo7q6vSlXx5cTJnvrlrtX4R6e5pfqmkBP3Jr0847ZY pWcf/OR0lepRRVoz6ELAXpm/pOr11S8B14UhvewmtcIPSsCOZn19ggkHSkfyRJ5Z3l/8i+1galx+ o3NbKDNK+t3ISTa7PTFxvaWk7IgQvYE9fy0UKmIFFWEe4OM/7MCtVJkQfsp8foSRh8dIiIMvhG8S Ley8tLQs3zQoJJGxSH6nHgTkuLbcc1Nrwu4oEtW9txo7xXgpGgk6CLRIGI9IgmmXFor7j2uxupHX XSVOu4Qud27imlPD1KdwNUVsVNNhRXliyh8wujk8+V0= ) ; keytag 4219`
	`fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbq2nguAgQ8KlBwbuvfaw9jKQKsBQO70CWfGvUjE/UlgEINSbJtEBhUpZhqFXI68YReH6EHZ u/0J03peGNevkzwDVDvfrVPijBTKMHcBTWrCJHY0uzwgyXmfD5nRDmdh0BRdH1ZAkUOq49exXmG9 Q4XCd8siO+st0SdWgyfLX8cDhtKaMPrQkLvVP71wBG3ShiudZR9CiukkFIiCJ5K06tYi4Z1nCpuR 5StzhQ3EXG8z+YyJJKWvLE7dECgDW/iEj2WI/UcJAnJFuldEsxYQUVVZOyXUD7WwSfvHTBFH4cpM 4Itzi9DBOfYYxSj9VSNcFeDjdP2h56axSbaBhL/6DYE= ) ; keytag 33856`
	`fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcJZ7fIMnn3G9L57f90VTAItrr3mgRby4Fo9I1GqqPxn4H/ug2IoarfzQFiNK340++5VcpXC sIm9cKGQBPBhrWa3XRerZyzOtE6mRTVqYOLv2JbLk6ix53kF11cGAsQ3hDB/FGD5gF0anMAgJEVl ogsOh9uqEZnZyJAPQXXm/P1l3fMAOU+Jo0/aEY9X5TaXTW3pNPEO4d6++ZaPb7h0EbYAYJ+qkGlF P4ah7Onoq8apH3MUxVbr72Bb6TCYTUF3Hf04uqPuW/xhKXYkvOc3e8Z5fI8VWuXTy03zFC/ItcrD 8OSgSO3HMwhzgbFQmDyNtUlPA/arDxjjlaSnXR8lklU= ) ; keytag 60360`
	`fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaI62lgkeJ6v9861JHM4t+jKyBno4ra9FCHT/dtpOH5ZUIcQClDjGwafFCwz6MSr3Nqb8A15 M8LO+K116Gk9Iz8w6z57/PyQ6WaXyR0/pSIJp0glmHvQ6mm6OeUhNRJFdLT/yJHBLpgA1irX8CBY W6x+LfFAsylQyZ5IIW0k31nDRXd+p3/CCw0uU/TakHzCY8BRvOA2+zvVLNKhnlvxlVFb534+JCeT RArnhfwdLNWKrI6IXMBBRGUcskaXKrO1Zyh0kpSEtrnhgUKTcwV2sQUyvfnLXxAUha5WbylDCjtl tyOgmywU3W7asIBXvvgEY9Vsm3hNyijBbTiZTycjV3k= ) ; keytag 23286`
	DNSKEY=4219/SEP is now in the chain-of-trust
	DS=4219/SHA-256 verifies DNSKEY=4219/SEP
	DNSKEY=33856/SEP is now in the chain-of-trust
	DS=33856/SHA-256 verifies DNSKEY=33856/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250923191703 20250916181703 4219 fpki-lab.gov. AylVd1AAKf+4Ch6P9ZB4HjASw90PLHBg9vfrplG7MH/agJSg6mU5b8wGI8OQBZvfb/uQuSwC06UI 0Il3mHHA0ih1QM8oFgm7H193QTTvnyJM7pLnsNFsoVeFqYUwHBLXQ6rOKUcdeCMA8KtnJ80mCwAj 49bXtPmBSYdXhZCP46Nb1A1lZB4ypPzBjg2IlcTZp1bpu5Eu7QzXU0XrFeu7K5eqaop8smLMXBiL IQI5OaOioOQtLBJrgXBpnrs2SLiMrX5b9Qbp+a8dt7jtthe2j+A7uuVS6uG5Ps0kLEbAdq/dLK9z UGQyxa1j9FTnV1pscXClr5nSXKDAyYXN19zSTg== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250923191703 20250916181703 33856 fpki-lab.gov. Bhp+yuGq+ejygWLmHanS99ZN4UOVruThZ4WvtK9voPWbN1qBwXGINEpGJ/q2epIgau6zL7pKgV/M BeD17t9CdBkPmMhQvyNkEiukWFgHlkKMktJFaL5RqGVhyixe8UqBB0aC1fEGFXBvLwtnk6LmSVgE QSAxsavWGTSmDNuAMwf04Xy+sgETdJviw2YZgW5/v2DrTk0E7mLrDPMXaAcBFUart2h6cqybCx3Q XIuKzOx/UKdba69J4Rx3PznJsQuRHhGiFzjyvo+JgTk7Ed7dvGYE02dkUbgOsOC8kb8t2367W2hd FCHzolHhsYNWleyH/QKITu+w2gAlRFXuzfGBBw== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250923191703 20250916181703 60360 fpki-lab.gov. pjxYq3RRea4wz60nAxwzNSvsvx+HS5WjxKnro7TRLMm5dZ/m6y/ewrR3zRuC0WI8RN9Bij1eo4uq B1Fh7OHVMvWwIy8Ln6AHv5R1TtVfQGEh0XlpYL5MTWZTIkQ1vRImQrcuGm1vU025lQI8EIYekzD/ G1LFOGkLEANcWmhuvZrZ95cjTDj1Y0cNzmwr5BU2WPuIb/HZEFrmhiu07em+DLL76/4ACKlSTsHr RhdByluY27Er92xctQNiT/hZLA7m5gvKO1sXkGCQit9xig3hF0WxxZ86+2HhJguDvZsj+2IuGS5T Ud0EnqNTC4yY3dSTe7FgX32TGp4MYaYtrxtYmA== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250923191703 20250916181703 23286 fpki-lab.gov. RM6t8QHVwVZ2msF7TyRgz6CYv6IPxLAGwttT2vW7Ku7nFQzcUbzFQyJk+9xUXikKsx1JuKYMAd3I WLjss45ZKEjPmAn3+3jA5KCAOTQA+KNEtUZ6fy0LCQXHsfg5X8zhmhlIImz8gZ+nhk9q0NYc4Fg4 J/tzp09/NQWv1NZRssPzAnAVLit1JnSk11iSbOfozWGqBtYUGHVzcHErpdDDBLVsXpFtDHx4iEeC y81iapPc+wf2NrSE5QwM9MrsnfqB8WQe312mbbF+x9rhuYlRkMrmh8bY0PSoiFIDOMEsgwNoYT07 EOPTJ3JbWGTA19Yomkfbiy2g3Wf3uAZ0Q3Dy1Q== )`
	RRSIG=4219 and DNSKEY=4219/SEP verifies the DNSKEY RRset
	RRSIG=33856 and DNSKEY=33856/SEP verifies the DNSKEY RRset
	RRSIG=60360 and DNSKEY=60360 verifies the DNSKEY RRset
	RRSIG=23286 and DNSKEY=23286 verifies the DNSKEY RRset
	DNSKEY=60360 is now in the chain-of-trust
	DNSKEY=23286 is now in the chain-of-trust
	Query to dns2.fpki-lab.gov for fpki-lab.gov/A
	Received 1381 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 1381 octets ;; HEADER SECTION ;; id = 490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250922191709 20250915181709 60360 fpki-lab.gov. nUs4+GaCJLb3nOpeDSSiTvWfHbRoBJhwRAIqXnQmpDpufeAg5TPxyHtwPN6d2zK88lmHqrYqXn7y KO5lpnY42hAnIzUXCnOk53HflWgrJSQP7TmcLU5XaVjqVUlpFwQHa6D3M3c9om3Tf7I+I2sbmEBG 9KOnnTY5RfZCK2uYqNlBwCD4oLzUq5oKivwOjd5SmrV7CtbDt/RxZDVnIMYcGnD77Ril1t6RkRas xwaXqp3tMpzarRpiQWRSXkUw/0QwddnzocTINAgvJj9WrrShGaNj2aJFIgwIowH256NxkW3wzrhm CBPQB0ddMhz1+jkSUtytgmAXIzicImWA8Nh8aA== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250923191646 20250916181646 23286 fpki-lab.gov. U/2kth3GVjNKXGH1e2whqIw1PEYEYh4bmxF/dt3vY+d+7JrBK61b9dotlfO8aD7YJGrpGIcIcoNU Sj6XxtSomKI8FhWzPcO3mc7a4aIXppN8/SL/0sXEDRQC7YoP0i5yJD8P0TtArtdZjHXRnNRcgZMS KLUCmCCNfTgvVhDDSqWqNSdt1vXUdrLbY/n57ELA+l271f/FUBUvMe+tzqEz7q3K0rA2x7b9aizf E8hlGW67xP4PAm6sbfMbw8DWVdIrMNorC3pDRXrNchjVnK50Oa9rIgjw/V/N7HohJY6vG1X6x9td Yuyi0pSSpjwE6/k7BiEakE6u63DNy1KCevmTog== ) 4pp2jk9ko0p0b8nkr5hs2qedlusbef4f.fpki-lab.gov. 86400 IN NSEC3 ( 1 0 1 8b30685360e77804 4pp2jk9ko0p0b8nkr5hs2qedlusbef4g NS SOA RRSIG DNSKEY NSEC3PARAM ) 4pp2jk9ko0p0b8nkr5hs2qedlusbef4f.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20250925020646 20250918010646 60360 fpki-lab.gov. VUMqqt+H0zYB+wVBxt9Qh75ShbZKh0zS/P6lKMmPQhk8M/DK2dtg9VP00Aq59PZeHDPYfXKmnkA8 KdNBqlJzvtYYuyVZfC5osr8a7AUC+fbD6EL1i+/jsbJJ3D+R+MK3sMF6XqP7J9MJDLSJBCMmc6O6 CTi9dfUTc2DfGgSCpcMXepm2jkfTDNVgL7lHngmQst7FoTpNUg9l4xtIl+/QB+xqlgE6sm4E1U/M W+cdwW4nvo82a1cogvDQ232JLXF1g46ni6BICBsymg33Pi9MwJbw3n4u/2RBkJ31/9oIVKzK6qYZ GC70B52/ny4Y0at8YpcWSHJwosoafxMyCvNlPw== ) 4pp2jk9ko0p0b8nkr5hs2qedlusbef4f.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20250925020646 20250918010646 23286 fpki-lab.gov. PWmQgaW+MgK06fgHnTHqyaYaZTZhjmB0Rikv3vtiQnP9i6fJOUfX3wYHyeEZW9cxk6ySNRK9KD8R hgGTuVCE53RE0I4Xc3DSkSSxlD9PMC7ABzxAN5Dtu+8fFzW3t0Mgs9CD99dlYjS2pyOa/R1b3Khz yh3LhQzE89Gbi2PYtmden416rIvxd9/TuInGkGTaAaXm8R0Z1i85I2O+ixi74YZSWQCHfoAlcGMR 1Y5Or0SelkY4Q0yborJqbEoIT+tMZQlWxztrmTuQEkqf9aO2V/TknDt4OE3pXcAXN/oS0brHNWcE UNf6tfXjJ+yqMENTFbYjU0+zdgVrT2DnCt97Iw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.fpki-lab.gov is authoritative for fpki-lab.gov
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.fpki-lab.gov for fpki-lab.gov/SOA
	Received 3814 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 3814 octets ;; HEADER SECTION ;; id = 10686 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN SOA ;; ANSWER SECTION (3 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250922191705 20250915181705 60360 fpki-lab.gov. THu4yc79cILhkezaqYCFnIuVyfGlwsRpeAuET4xepnMqG+zq2j+hpU8W4Kdaz/1PtWPzY489WOCy V69ECeCZFr0fOgKtVeGmVy03fa0JpfyFTTD0T57nZvoHGAlvc1IZaQeoFI/fkTHAesTdTVHOJQ2H AKvMkbC2/JjVNH/drWmPFeLN1U4fi8EYAi/Wx+5fd9D96SfcLEGCBqmh/zhTYgLsy7VPZLaptljB GQICn//eZU9fRe92TEZ2fDF7XEOQN4Gg3osdTh8/BFgsqzhpX8eagyXC1lpUdNpeTKjduMUCBPHg x0U7kfRGuaRc60i72u/MyZq1l8YZJSxsjOReag== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250923191712 20250916181712 23286 fpki-lab.gov. JgFpejFe4Z5fvxi1CaYxSodlahzuAS+E6BsmnpllpBbKjKsZ4ihS5pcMHZ7Edy0YjnqDt+shED2b hRb9Reu/ehbPr5EMM+oHEt7TXIf6qIFjNwWaL0R0UXjPIcpcPMGmKibWNZxw/LxAX2KSiuL5/hWR vqJe+KRnPMQHU3/1SGwVYyrDkrwX+b5MtYk++oscFlfH2k/3ydXe7TQlxvxquBY0bLHoAGKWwaHH Da0ICpj94/9J78tDPE5IuWaZ2wVIXUUu2utHfbjJUZzT3mfdKGDx2Kc7P86zWkABchwfWi14h4HK qDg45i26HTaqD8IcuxmHdK//1xzfmk9+QCeXxQ== ) ;; AUTHORITY SECTION (4 records) fpki-lab.gov. 500 IN NS dns2.fpki-lab.gov. fpki-lab.gov. 500 IN NS dns1.fpki-lab.gov. fpki-lab.gov. 500 IN RRSIG ( NS 8 2 500 20250922191733 20250915181733 60360 fpki-lab.gov. dpPMnlCYqKmgkNanV4HK8s47QgtUE9wiUO13fITApozviM/16fTlJGTnQvpapfJNcZNgIBvbfSU0 f1IpD5/v4zfdr4AujJW/vkRLq5ch2zvequcNAjW9Buh+0QIhrp2wQZFyjqoQxWYDxhr2y/yvL9Uz whx9iILa4KK3je2CjRiB7+k5aIPgOvRuVG7vs+C+NWTgRIrH1tQzwK2Uv2mLRq846IdsGYdNqy9t LO+70n59E+/hoGD2Q9nzQ/SZVM2y1eF33WVkHPvRwGvm95D5ilfV2vxPFaI6Dc3rIAwGimW5+UVL ymVR9/OdsFvQnEqPwtOv2ZIF8DEVZxQvA10E4Q== ) fpki-lab.gov. 500 IN RRSIG ( NS 8 2 500 20250923191701 20250916181701 23286 fpki-lab.gov. n1WPWVa3fRyx79kAMsjhgg+hMjwCqsV4QR/2QT53/P5KtAPtRwsPKIsnCazEK/dKnWjRdDIkqX/E iuSGk8yeQK3ojMckiLrEQb08//aNo6qiaP6XWsVAbvLnD1b2yXCqoGFAiJcZNi5oDI+pH/5JzlmD /14WZgYWW5PYx/AEbeYM0ktHqxNkhgB8S1UfZdw4r43w+ZovFJuBq/xIOJodrgMLYCk7rlmGRjW8 F3A5uCA7B5VIvkjrBKkjkI8VkHkp+z9g48LUK+FUFXQsuJMjaWzw+QGMlRdUjhGYJYxW9eA5HXqH 4BH3Nb+8sd9gkWRtIBZrvQqR2bnilNpRaJml5w== ) ;; ADDITIONAL SECTION (13 records) dns1.fpki-lab.gov. 86400 IN A 199.167.92.100 dns1.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20250922191733 20250915181733 60360 fpki-lab.gov. f4DAdxQeJLSPF6gsfWVBRJGBQwqvTFBA8o8P5jNb9XDqqO4w+rKuurdrjUoC1wg1RrRqm9+Q9TGR ND4QOUS2TZHFpzizLMPbSR4T47+sWNAWneb96w9N8HJKkHHbIgSxbxGx+zhs7gPcQKkRgcDYuGvA Skof33MXFkwfeFeoIb0K0KqnADm5v8fIUku3Y8makz4ELZq/khVnrte5iF5Vi+hM0QSZ240zFUnA J4kK1Q6fQp7rAJAReTgJTY+S/OAWUewI/OLSUmihaPmdlvoLMqKXLPdxdnL9xaMIKqETqs+koT/L ECbfj3HOLO79hcdnl2GG+2g47NqOAbZFp2n3Gg== ) dns1.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20250923191701 20250916181701 23286 fpki-lab.gov. Y2o1v2q1PU4qjideCxIIsoHnIq3xqQPkNdIG9PxRTiJn2WBVR+Dg9ijwi/jxKUiifM07/iTIpdxr A+9PxSYDUqB//FY8mX5G9ExaSHSljpzk4sVo4BYi6ZXNqYU+aCzNTQRzSgxN0vTzrgRozheYomdS BjHQUYyK/YUvecBmKNuC9QXy1qUQWqBF7wEqq/PwvjUAvHCUBUV2Nx2k8CWVChl9UeRliMaz9ENZ QzSHpzVH1ZG4GVZUmymLNetr4Chh48ehy0LbsHq4KowPrY4TEBV4q2rgqPUJRxOmL8Vgi2ijmNSC u1xFnT8/fK7tRrS+ZvIpiMyf9L5f0hHCcPVSeg== ) dns2.fpki-lab.gov. 86400 IN A 199.167.93.100 dns2.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20250922191733 20250915181733 60360 fpki-lab.gov. U96Zea3AK2TeN/TLA78VvsuaEgi5fkpyMLGcSnF/w8C5iSYimAlRwfkwHp+7OAiWBRy9gbOKxMa6 RnkIlsCiKrXAKFj0UnW59J6MzkLPOIHzdDcSrlmLiB2pbm7wuUviHiBZJ22487qW1r6WcF22LGOC huXBLfOfLQsg1ERFoYS9y0gt8mbnccbO1RkgTeeMOFau3wdhlGyg3iTCfmIEX8EiEHCNZPrTNuS9 ZEyrRpVkXcuk2Um3bqOFq65y4RjDF6x0LBDi8q2WXX0JwutmFRIHUMg2YQheCLHYP8RcPe2Pj/Z8 OCF75o8b+upKJEe2r3A+U//LHhepkWlX+7JJiw== ) dns2.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20250923191701 20250916181701 23286 fpki-lab.gov. mKl/emzsVyjTZMVKkkp0gfaqTTQVWBaOJA5/xIA0lKProUL5/bT+qANVwONaUu0Lr5DXgaInWfhj JZbSiBG0pGTNCoEaz1OrmAQdk+t13b1tkN91dBWbt5LmIMxKM3SaEai3cJgqMjE0BqjbksM8r+Jt YL0yJ2WpQ2BUwVYPOVDZstfRDsJSJrVsG3gplHx7kUrMHfCe9h8ZR+frsNV5aycPkRk72IOP8uI6 4FQdcGp4di9ARW8OOSsgOXNiql/WE1H8/1t4WqIZq4xiFaBUAh7b9EZi/cxOgMsWGt034haw/A3X AGZHNuzg1U6UO3sdVR8IQoypBynyebddk7WfDw== ) dns1.fpki-lab.gov. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns1.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20250922191733 20250915181733 60360 fpki-lab.gov. P0N/bOVkxMNDN8xdBF3PwJ0/vCSsad+Vf+ihFRH6CUCqxFopLre5kOcs7EwJQXnon4ue1RwBHT+U /NfMMqcLoBK3hpQx6jMcEsu1DEizU0TbSFf7XwPQPED4geJq9gubvZebW2k9u9PlUF3n5KGrFsri /qkyooZWD13XJEI30jRMiCqi3l7H6sZgHh4RGgIHKKu4qmxtynR8cDrs2C0j8laar0lScB4jdc+V E5wCxLicsufl9GRYdJ6W7yqRDolOyKMDIZh2DQdZBYE/bvLLWSLb6091SvcHBZSH2zwVd7G3C6/J RHQEMKqxSDdm9sdL6XOfNNVYgghzArNlgr8FZw== ) dns1.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20250923191701 20250916181701 23286 fpki-lab.gov. itG1pVbjH2WIWXYmykS8Y9Vgokm4y9xbMIJf0ct6sTzky+6WlBZGCWloux+Qfblxa96ybH1tSB9x 2I4N+CR4xx3+xm/7J9NM0Ja7kDcrHMsQO98VNKVAjhg/8KvA+FPlaz/9sJtH6wkW7LtAaNgpY1aR 79ZIN0wnUhtI6dl8oHtM6hhC8Jklelly2UEFu389uLuMtkPDP2uFvi+DS4kkbplUn0ZNU7s7hzxf FCaw5gkY22fzWI3AM9pDQSAnnSUBhB5DCaCusP7pyr8/dqF3i/KIRlaKLLQoKwvDarpItroSqVBv ROqmQG/TxzAEODxWleRby37XbGAe/OjiYCt9qw== ) dns2.fpki-lab.gov. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns2.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20250922191733 20250915181733 60360 fpki-lab.gov. Cvd+T0j1irNRYVDUMCnyrbqd/JYr3D2iFdi6Zt+sDou6ZAPLJE9gg1XRuKXM1c/NC7LM2B3UEuVC cClVuejCQ58lpr1uQJThElIhMajCuCd34byeiqGCjpLFRBp7eUueRSTtM61fWjtoxJswCv6ngo3v uX8hUuiVjQT6J6xyxQ5AumW4oBZHnr949vdlCdwAKJhiF5zEvIn9y0r87xq28dgUcsKuLhpk8Yol FafEMiRxw7EYS6v5/jxVroXhHxG5XJVikztOVVOe3oDKGKQAKV0csdph/vQubJFrlTOClh+Du0GE frHCBbWwFjfDAlkwBBnyzWm45zJ9pcP5ziejTg== ) dns2.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20250923191701 20250916181701 23286 fpki-lab.gov. jJha85Drl1RUmqNwC0dNIrU5cVhvkuoPCr48N93AExWp1Y9A+HDwYI4fh7u1ue7Bs3QzZYK+f3sI xEEBCljwkjsj2jJa2qyFWhsduA4fLynjh1MJ2OlvwuevQQOOu1+67vB3ojGE5zGq3O4gP0/NncvB ShF/lTVGVOK7w7Ak1SJdY848OWYAAvR6Uv4Bu9VEBtUR9rP4Zs0MX/xyMwpebp1Z+mlvNGvwuBNR C2y0UdwRBrh+ByN8Sv7HsUs1hZqVtQEV/7fmi4M+kaqhS6oAOE+T0eyiB9TL4IUPcFix3esrnTlm qtqzcsQ9q71YP02cE7MS5Msk9b+5TaCoF9B8tw== ) ;; { "EDNS-VERSION": 0 }
	Query to dns2.fpki-lab.gov for fpki-lab.gov/A
	Error querying dns2.fpki-lab.gov/199.167.93.100 for fpki-lab.gov/A: 'query timed out'
	All Queries to dns2.fpki-lab.gov for fpki-lab.gov/A timed out or failed
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250922191709 20250915181709 60360 fpki-lab.gov. nUs4+GaCJLb3nOpeDSSiTvWfHbRoBJhwRAIqXnQmpDpufeAg5TPxyHtwPN6d2zK88lmHqrYqXn7y KO5lpnY42hAnIzUXCnOk53HflWgrJSQP7TmcLU5XaVjqVUlpFwQHa6D3M3c9om3Tf7I+I2sbmEBG 9KOnnTY5RfZCK2uYqNlBwCD4oLzUq5oKivwOjd5SmrV7CtbDt/RxZDVnIMYcGnD77Ril1t6RkRas xwaXqp3tMpzarRpiQWRSXkUw/0QwddnzocTINAgvJj9WrrShGaNj2aJFIgwIowH256NxkW3wzrhm CBPQB0ddMhz1+jkSUtytgmAXIzicImWA8Nh8aA== )`
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250923191646 20250916181646 23286 fpki-lab.gov. U/2kth3GVjNKXGH1e2whqIw1PEYEYh4bmxF/dt3vY+d+7JrBK61b9dotlfO8aD7YJGrpGIcIcoNU Sj6XxtSomKI8FhWzPcO3mc7a4aIXppN8/SL/0sXEDRQC7YoP0i5yJD8P0TtArtdZjHXRnNRcgZMS KLUCmCCNfTgvVhDDSqWqNSdt1vXUdrLbY/n57ELA+l271f/FUBUvMe+tzqEz7q3K0rA2x7b9aizf E8hlGW67xP4PAm6sbfMbw8DWVdIrMNorC3pDRXrNchjVnK50Oa9rIgjw/V/N7HohJY6vG1X6x9td Yuyi0pSSpjwE6/k7BiEakE6u63DNy1KCevmTog== )`
	RRSIG=60360 and DNSKEY=60360 verifies the SOA RRset
	RRSIG=23286 and DNSKEY=23286 verifies the SOA RRset

fpki-lab.gov

	Query to dns1.fpki-lab.gov for fpki-lab.gov/A
	Received 1381 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 1381 octets ;; HEADER SECTION ;; id = 13127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250922191928 20250915181928 60360 fpki-lab.gov. fsjh5m3/blmbM4OInWTMR66Z5dTPX/Nsc6Dwwis3qMvgNBFDNXN3W0LylyuRgmkCFaZPZcu/KwMN z/spU0a4f7SdoHqG5vuQIoe+47YJryKIZF1+HuukzX2XSw2XAqUq+BaJui9Pv9zvc+p922YzfVPK cGOxE/4RIl3vUc0BT4N3Gb3oO6eJ8JlHKKdJmsQ6tv4rbuneQ22DSeOcjj+zPrkfRCzGBv40igLD mQ2QgAt3qfRYuGGkuFOxI9JrZifbfys0fk0g0fNx+x451ITNLO/hElTSZFj7PayHDjLhnhCwHHcQ qTQX1XmPwVfi6FxKMEGgdnHBQzlU5Z0yhOM+2Q== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250923191703 20250916181703 23286 fpki-lab.gov. cW688u7I6T3P67Y/25tifiFJEXFEMOXJL2M4hsckEGLhc4qSsDpRAcRMzCzeH78cF8jMdxIWsfbv RfDvsIDgCwhtwfYuXuo5OlBg8acOlXDDFoJIHEhFQWOIeaqle4ZBcqQEGDTWQnQSqDAqB2rMSotX HIE3zL3c2cBEXyM44iC+dInOtEDJJt0a7XL5Llc2H8VnhWA/vm+n74xxCH8l+SBT0ibVDNywalUR MP79bdYkDQy2F/l2mxSCowk2s8Ohdx25ypY/kF9L4rV+p4zt1sol1xOwaxVb/ebwGDnwEtCbw8E4 3C3e+fZkJ9kUX452j67hZZv4AkY4n5/535tG6w== ) 1ha0cqrkqnjdcs65cntgjd8op882rpdb.fpki-lab.gov. 86400 IN NSEC3 ( 1 0 1 ddf92ce911509439 1ha0cqrkqnjdcs65cntgjd8op882rpdc NS SOA RRSIG DNSKEY NSEC3PARAM ) 1ha0cqrkqnjdcs65cntgjd8op882rpdb.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20250925020649 20250918010649 60360 fpki-lab.gov. tl4s5dJmVqGd+WieS1gYr68tDzd6tmyaD3a4JkX2XQlkJz3lY+N9/O6vHEflSNgZ02OX5BLep35+ Si+eILsFoC5APBXWIGWZ1cER2/i3DxNxFyFbmMojBB6lzTGwZ/njcdKy95hvoBbrKCaX0ZPe1Qgu vF7aiL0AlcCyy0seUkg9yLm7NDCcxCPuADsWw1pPmYAPrRlcHL4KrbAvbCR3QX2xwYRJiTVQo8mf 7NpC2WTMITK2+gbrmu8xOwcdDS0pYsAvO9uePgnFJL8ahsufdvtHLZWEZeLwKwa3vZ4EdHOQQ/+F rPwpm0gSrUdmgJIWRlxHFt0PWegXK0d4eZfmpQ== ) 1ha0cqrkqnjdcs65cntgjd8op882rpdb.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20250925020649 20250918010649 23286 fpki-lab.gov. NPhkA9Fh8phX/Gp/50LbB7wu34Nzhym+hqwacHSI2OCMdyYTjjRegq6x3kFgv7Upuj3yP/vQeoaB Nd5PWcz/hUJdLxtFJvYPrFN4rA+UPDuyPPg45/T9tKG36lTsjNR4SB799svsvZiitftNev0n4unk EDlXjq3e7VEcfv9S89PkOlXLg56xlN9A4+h2QmApKlCj4x1Po/+eGG5ISzc2YB+T3yNPory1BmIh ApXuJ2Ee94TfevB2Wm8VfBTgsbAvKc3d0DZWPPg1nsbAyJuyQEgsJ9CzD6Zc8P56pwuzvg97WWiv r0CbZUK11Czm9LblG+7ov5B6qOv32x/nwdAYNA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.fpki-lab.gov is authoritative for fpki-lab.gov
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.fpki-lab.gov for fpki-lab.gov/A
	Received 1381 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 1381 octets ;; HEADER SECTION ;; id = 38785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250922191813 20250915181813 60360 fpki-lab.gov. Tw/QgG3KIW0kePlWTYEV8HHtft5SuSGj/cxwaqZBrLlrWI9AYm6DrDQZRI1Jmo9Aj+qQit1nsJjY rDMFHgG4MQY6r6FBlxrHWLGOxt7PSJrOHGqJM7JjGsTV2xCGOkrxHu/0uCyBaHn4g9o8K3P2g0Jj kuKNgNGI16CPhIMaTa6NAoAv7n/R/Li8A34UTs7D06915FhP5aZ6+GGd/WjcYcrZY/uXJ8Z3pWmj rLpuc6lxwIhmZqpJOZL6xZ5dU/8oKSlpEzUFNCzEvoqYvZtWCTBNsvIrohIVUxkH1YcMmLR/7JOh G7SNTdbxdvga05Mvc80nObkBMvNn/9hyXFha+Q== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250923191701 20250916181701 23286 fpki-lab.gov. kx+hQKSXSL2Z5FGbCudCK1r8iqht1PxutbVyTOFQTWOq9bj1Uotidssg47UtAdbTNarMz46xyXyZ wSE29p67yCnCE8awfNxUNX/W/e8TlS9zcmZ4B3Ix74nZFb/9mH7OwxYPVqSkrDiH39HNA8BXAPQp WCFtwOWvpj1h07PYw7YjgCUKvcGVWKwvEvYBlsoUjx/EkhfbtEojUPgBvqemjd0ndRrq9Shn5WD0 4zF9XX5lBPi0qIsMoBVW6EniD640+HY8x4vx3NzoQjAOVrhtbZFztLYVgvp5ZeGfvK/Jxws2GEF7 lnILXCzC6/TinCb/JdcahggAd9r/TbmiB9plCg== ) qcputvjtso5k6ohagkinqs9undh62k4s.fpki-lab.gov. 86400 IN NSEC3 ( 1 0 1 beddcd0b27e2fc78 qcputvjtso5k6ohagkinqs9undh62k4t NS SOA RRSIG DNSKEY NSEC3PARAM ) qcputvjtso5k6ohagkinqs9undh62k4s.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20250925020649 20250918010649 60360 fpki-lab.gov. qNVWRy58lsngwKC5u8o78vMLexBwYM7IkGSqtJTdz7EIB4STB2bWM2zDr1WmP72EKxd5a9Qa8iMp 07DqOyTJ7lU6topdkTtrmKTqLfC4ybE9eMScZYtQ+kJaZa8xFZeOlxbjyv+r3dfWX5TLiHx6N7zr cH840RFvmGoEjnbaKO6yqk/7TH9gFOjYeekRYkAYd6evVV0vah5BdCGVWZwCyHYd3fGlVFxq+zeN E88WS7Y1loPnFPHZzQhj2tJlKUtwGVEsVLHr6LYiVsBzinQzKUQPErczO/LCFOMIYlHQ5+685DNe SN/DaFZEal6G9SgjQuMDdOHoHOIbdDF6Xm0S5A== ) qcputvjtso5k6ohagkinqs9undh62k4s.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20250925020649 20250918010649 23286 fpki-lab.gov. G8e1onpH7Mr/NF2LepWT5iYq8Sk4q3zZEqq5O2ObL5nnGgf8ldgnbiKiXSihOKQJN6F1xa+c+WEA D8XPH9ao7pL+wuItYPtS5/JCrD1e0jB3F49r8dEUycpaMHivNmkjoT+34zBrgWjnFxPGGdDd/6PE r1WnS7z/GXB2bFGBUOZTZ4UahlzogVYvnwkObcrBZqenycSty2pa1FaEiR48QTV7K3+fwEhHpRRt DG8kSWNIPjvU9jyJ0wXUDBBQprmPFCB+31GHo6fGYwJHDXAoqvyQDqFrVLUTaS8PdaYGZNKAIt4B SjzrIPp0zkT6aQQ2n6FWFYYPTppNlXILIchFgw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250922191928 20250915181928 60360 fpki-lab.gov. fsjh5m3/blmbM4OInWTMR66Z5dTPX/Nsc6Dwwis3qMvgNBFDNXN3W0LylyuRgmkCFaZPZcu/KwMN z/spU0a4f7SdoHqG5vuQIoe+47YJryKIZF1+HuukzX2XSw2XAqUq+BaJui9Pv9zvc+p922YzfVPK cGOxE/4RIl3vUc0BT4N3Gb3oO6eJ8JlHKKdJmsQ6tv4rbuneQ22DSeOcjj+zPrkfRCzGBv40igLD mQ2QgAt3qfRYuGGkuFOxI9JrZifbfys0fk0g0fNx+x451ITNLO/hElTSZFj7PayHDjLhnhCwHHcQ qTQX1XmPwVfi6FxKMEGgdnHBQzlU5Z0yhOM+2Q== )`
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20250923191703 20250916181703 23286 fpki-lab.gov. cW688u7I6T3P67Y/25tifiFJEXFEMOXJL2M4hsckEGLhc4qSsDpRAcRMzCzeH78cF8jMdxIWsfbv RfDvsIDgCwhtwfYuXuo5OlBg8acOlXDDFoJIHEhFQWOIeaqle4ZBcqQEGDTWQnQSqDAqB2rMSotX HIE3zL3c2cBEXyM44iC+dInOtEDJJt0a7XL5Llc2H8VnhWA/vm+n74xxCH8l+SBT0ibVDNywalUR MP79bdYkDQy2F/l2mxSCowk2s8Ohdx25ypY/kF9L4rV+p4zt1sol1xOwaxVb/ebwGDnwEtCbw8E4 3C3e+fZkJ9kUX452j67hZZv4AkY4n5/535tG6w== )`
	RRSIG=60360 and DNSKEY=60360 verifies the SOA RRset
	RRSIG=23286 and DNSKEY=23286 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fpki-lab.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: