DNSSEC Debugger - fpki-lab.gov

Domain Name:

Time: 2026-03-25 04:44:06 UTC

Analyzing DNSSEC problems for fpki-lab.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1417 octets ;; HEADER SECTION ;; id = 47657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=54393 is now in the chain-of-trust
	Query to g.root-servers.net for fpki-lab.gov/A
	Received 622 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 622 octets ;; HEADER SECTION ;; id = 23825 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260406170000 20260324160000 21831 . JNfVh83+oC8GBtTaprwBJFbl1cRAwSNZ/fl/tAq2e4e04JmQk74lX6U/WlmrFs3y2XDBj8fwet/K Tny2QdtBgHx7nqQY+dwBJTVLhK07A1ossznHOdMoRFhq0vGzkfqIiR/S4xMAFqOQ/DDhesfTwN2s BVmwb98xPR4yUaTjUSA+wXhzaJbWXyfoGb+LzPQ2UIgG8BZDVtX1QW1hAg0+h/V9wMI/yj8FYtgO pRryj5+fonkE35M0UslBjwGboGlPzeNw8p6Ek82ll5MGngKZJcWIEAbUKzZNmtul0/8e1Lf8i3Ln dd6ZEDUKGsjxdNsvut5Vtdbf8iOLim6FMpfjlw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 610 octets ;; HEADER SECTION ;; id = 7218 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260406170000 20260324160000 21831 . JNfVh83+oC8GBtTaprwBJFbl1cRAwSNZ/fl/tAq2e4e04JmQk74lX6U/WlmrFs3y2XDBj8fwet/K Tny2QdtBgHx7nqQY+dwBJTVLhK07A1ossznHOdMoRFhq0vGzkfqIiR/S4xMAFqOQ/DDhesfTwN2s BVmwb98xPR4yUaTjUSA+wXhzaJbWXyfoGb+LzPQ2UIgG8BZDVtX1QW1hAg0+h/V9wMI/yj8FYtgO pRryj5+fonkE35M0UslBjwGboGlPzeNw8p6Ek82ll5MGngKZJcWIEAbUKzZNmtul0/8e1Lf8i3Ln dd6ZEDUKGsjxdNsvut5Vtdbf8iOLim6FMpfjlw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 18020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260406170000 20260324160000 21831 . JNfVh83+oC8GBtTaprwBJFbl1cRAwSNZ/fl/tAq2e4e04JmQk74lX6U/WlmrFs3y2XDBj8fwet/K Tny2QdtBgHx7nqQY+dwBJTVLhK07A1ossznHOdMoRFhq0vGzkfqIiR/S4xMAFqOQ/DDhesfTwN2s BVmwb98xPR4yUaTjUSA+wXhzaJbWXyfoGb+LzPQ2UIgG8BZDVtX1QW1hAg0+h/V9wMI/yj8FYtgO pRryj5+fonkE35M0UslBjwGboGlPzeNw8p6Ek82ll5MGngKZJcWIEAbUKzZNmtul0/8e1Lf8i3Ln dd6ZEDUKGsjxdNsvut5Vtdbf8iOLim6FMpfjlw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260406170000 20260324160000 21831 . JNfVh83+oC8GBtTaprwBJFbl1cRAwSNZ/fl/tAq2e4e04JmQk74lX6U/WlmrFs3y2XDBj8fwet/K Tny2QdtBgHx7nqQY+dwBJTVLhK07A1ossznHOdMoRFhq0vGzkfqIiR/S4xMAFqOQ/DDhesfTwN2s BVmwb98xPR4yUaTjUSA+wXhzaJbWXyfoGb+LzPQ2UIgG8BZDVtX1QW1hAg0+h/V9wMI/yj8FYtgO pRryj5+fonkE35M0UslBjwGboGlPzeNw8p6Ek82ll5MGngKZJcWIEAbUKzZNmtul0/8e1Lf8i3Ln dd6ZEDUKGsjxdNsvut5Vtdbf8iOLim6FMpfjlw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 22073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for fpki-lab.gov/A
	Received 362 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 362 octets ;; HEADER SECTION ;; id = 40889 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fpki-lab.gov. 10800 IN NS dns1.fpki-lab.gov. fpki-lab.gov. 10800 IN NS dns2.fpki-lab.gov. fpki-lab.gov. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f ) fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20260326054406 20260324034406 35496 gov. zHS/UFK08B6iwfKTbuM5uKypLxs8/RxVGWAzm+BhCcuwtaZ8tkpMhNKBuWlewZw0r1/xNxVqQK2E Sx9elXlPYg== ) ;; ADDITIONAL SECTION (5 records) dns1.fpki-lab.gov. 3600 IN A 199.167.92.100 dns1.fpki-lab.gov. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.fpki-lab.gov. 3600 IN A 199.167.93.100 dns2.fpki-lab.gov. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for fpki-lab.gov/DNSKEY
	Received 362 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 362 octets ;; HEADER SECTION ;; id = 24725 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fpki-lab.gov. 10800 IN NS dns1.fpki-lab.gov. fpki-lab.gov. 10800 IN NS dns2.fpki-lab.gov. fpki-lab.gov. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f ) fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20260326054406 20260324034406 35496 gov. Rxavstf73YeU3CG6hlcUJIepOs8CXLSS42BG7Dm2liW1M6Qw29MTbQ4XRZM7/c/ysOTADFBvPyAi X5y/rU/Mdg== ) ;; ADDITIONAL SECTION (5 records) dns1.fpki-lab.gov. 3600 IN A 199.167.92.100 dns1.fpki-lab.gov. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.fpki-lab.gov. 3600 IN A 199.167.93.100 dns2.fpki-lab.gov. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Found child zone fpki-lab.gov

fpki-lab.gov

	Checking DS between gov and fpki-lab.gov
	Query to b.ns.gov for fpki-lab.gov/DS
	Received 236 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 236 octets ;; HEADER SECTION ;; id = 38531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN DS ;; ANSWER SECTION (3 records) fpki-lab.gov. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f ) fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20260326054406 20260324034406 35496 gov. LqixMY/NvzO+tkm9ugbY7vYNliczpS2nB2/5D3V4r5oj1NCC5dm73rJG46Su9ugk3y3TabWpSdqz wP4cf+tSkg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for fpki-lab.gov in the gov zone
	DS=29035/SHA-256 has algorithm RSASHA256
	DS=4219/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fpki-lab.gov. 3600 IN RRSIG ( DS 13 2 3600 20260326054406 20260324034406 35496 gov. LqixMY/NvzO+tkm9ugbY7vYNliczpS2nB2/5D3V4r5oj1NCC5dm73rJG46Su9ugk3y3TabWpSdqz wP4cf+tSkg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=29035/SHA-256 is now in the chain-of-trust
	DS=4219/SHA-256 is now in the chain-of-trust
	`fpki-lab.gov. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f )`
	`fpki-lab.gov. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 )`
	Query to dns2.fpki-lab.gov for fpki-lab.gov/DNSKEY
	Received 2921 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 2921 octets ;; HEADER SECTION ;; id = 37136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 10 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN DNSKEY ;; ANSWER SECTION (10 records) fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZ+XqJdNfVGk5amEnSmlJPJmJ26Wg262cifnjR+Oq3ZaOUIOTyNVGHzBG4eWWVRMkG9vmZSr UZVfAPRbkUZWSquh1RaGdrx1XaZj+d9BOA2twGOhkfESPbPpI6dFUnqJIneUq6SSRKI7ONkSa+mA drpU7HcOMsBdS+0yJPue99UK4G4uo1rJmB9pB2tD3L5SAWHo/OXxyhu4E/CJMweJraViG5N2V3T8 yOco+yPInNc2r4035WgqsyyY1Wcum0G4HksV0iaLhAWHoM6+CvZxOzLQQXvXSg0InmQhsflw2A24 o17LJaPR/fIlgYF++sGR1egHuAVUPbshm5rq6pMrfAk= ) ; keytag 28656 fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbV26k5g5poACNTZNhVWob1HcflDZzxDoygAYWF1C2P+CsJni8+Qpf/QJnS5mZ2BMKB6i3+I ygdKMKRfiumRyei/rfhIAEEbiCYJwCgx2pYuC8Opnprn7QhUrnee+9Lhf2TVwXKSDaR3Z2Glh70h bPsehHzGaGf/fnlWapq5IVaqtXQFLG2jfsMfiYcLoB8Z2GbNyqrzsAS9SvU6MlwaXW8D193gKI0t 934GyLo9j9D23XzbJsfiUzj/0O1VeuNiRAdF5Kn67pESgoUhb3ChaAXmsIBrRbkLn5O630Hp30mu vNH88yVmByAIedbLkVvsN/M/QiNrYzydF8go0cF+1R0= ) ; keytag 43725 fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbTJCjYTkHbV7xsiNml2EOdNL/rXvZlKZIRK47qkCLvLW5NxZFHEA6cmMcYrhm9DfUy+5Ca7 rkQjIbHMrb1YHVf9wYaud5wqJDY9jG8X3MLei0WaYRw3gYPrSbqbfkh0K3G++pMxxFXQTU5pjkPh gfs9pshdyzsuOeFJKlvd4a1Ew4Xsn2cyxH8r050GGgCuPsRfyihzd/ekCrM0N68ROWgCiH6SdMBa rjcQTueFZji37ImEJZX/nl0mYZPNzd28EgCHd0YvXS4JD5EdUf9A9sT02OqcQZtgg/tGCCYc9LwT BYm4tmX3FenBgWAF90/d8kPXUkdpGPUEH74mji+WdNs= ) ; keytag 24183 fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc3kg6cPi9uUB0/2IGZvH79LhYgvfniZPVvKImYxZxYL4BWcs4E+Hv2GqU8M0rYhYfFhn1d3 eZbfXBybsWOBUHyVJXwhJZlHBJ8Ud9ANCJ65CFebGeecSsxfT0nvv26apY5zMQxU2nyUWbQ7vSnK 4qSpZRfRxGbem/4VrGTuJ58nog7XuyYLSGXeEqPtG2fo26UjGpUNLbqMurCy3wdmHl21VbM7VhYl p9NQwO++bEDpS1hsUOoNkbww4gNWqN8zQjgaKyUZc1DFb0b2mfkIO/4Qbi4u+Uh9v74sm++erLmI wc7HywqRQfvdd0sI2HyZ1xZJVlauyg/XkkUe7zH2Shc= ) ; keytag 29035 fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbCNjou0CVWFCq104UMjYxv5hSlLSAEo7q6vSlXx5cTJnvrlrtX4R6e5pfqmkBP3Jr0847ZY pWcf/OR0lepRRVoz6ELAXpm/pOr11S8B14UhvewmtcIPSsCOZn19ggkHSkfyRJ5Z3l/8i+1galx+ o3NbKDNK+t3ISTa7PTFxvaWk7IgQvYE9fy0UKmIFFWEe4OM/7MCtVJkQfsp8foSRh8dIiIMvhG8S Ley8tLQs3zQoJJGxSH6nHgTkuLbcc1Nrwu4oEtW9txo7xXgpGgk6CLRIGI9IgmmXFor7j2uxupHX XSVOu4Qud27imlPD1KdwNUVsVNNhRXliyh8wujk8+V0= ) ; keytag 4219 fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 28656 fpki-lab.gov. SnERtjKX1xDH7ryyi2VKZdx7xmHesNGYYB0Z+nW+74QHVjThwTBfL8d2rdj+b5mQPRr48sr66EJC +15qXU0K7cRpByY1o1hTIPpUQqrW5/Wkos9sGThfxPt+g6Fv6E1pcTxc96+EM6AKeSvyABEPHCME VfZ2VXV3tNU58n8A/wA54Th/FaAbg/1caDxSGbdT0xtCJRfuuVRISZCYnKEi/deESZuDrAZfqVlf aXHU67Lzkhtgq7o656ombVFPQkoBwDmwh1czOvrCl6kUudBC1AD+MqlH1nckUcTotjqlIX05YY6F 9zh7ZTdLk5yV7Fnz+UI12vP/dHajW6Bvq1BSDg== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 43725 fpki-lab.gov. bDO7EkiMs6NSr6QLnnzWu5+CDtte7DC3uZ87mqCQEm0H+E9gwmDua6vf5Aj9YMChG9NMM7wUCEAr q0P4S8niygmvUmZm1yG6/bvwP947C79DopiaRmqmz7g2cPxbRuXFs/EC14acYuH2krDt/sxPkc73 l7Y/dgqE2DLfnd5/OETLLq12BZCGLAEt34Qb9DjLApvvag2vRXek/DKQzlU827SZt8N2I3aPAFEY lQFTTWLacSRVhgkoE+C6RU8Iv6ArHT9M0JT/fhJx7wEfmSmkHHccOYJUSJzGl+rqpFUcumgFrtOw L0ZwpWTV3IbZhRmoXvH7FGndz2s0Em341isTaA== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 24183 fpki-lab.gov. pxHK3gWQLK3V3LJj2+tXj91c1x1Tib09rSD1pu/GsgUpXj7a1vLGZkKmfFbyL3s5YNcdf9DYvmgA BdKZCniwdfD8V+q7VvVWYdgx8Ml593qLsmthx6nIEfXqsFUocPO2BetVJYt3MSieKglMJYEakGoq z8YoXA6c/YimCm/BXKthmvAHFAV547RuBXq8G+UcEVSJ4V/3oxmpLIlGTJELew77JJj90w6cDmpt 3ni42l7SbnOMW+iSJ9fcBfpZLrVBQ57nZ/4UPiVfkuufJ5IKsbBFMt/UmalR1Jb1at40fgqc9vlX 9kuX04PAZjVoaUYCjRR0ix3cOe9RjNWJi/XaoA== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 29035 fpki-lab.gov. trPbOM9nX0QadN5VkRR6GF/9yFJFACEib8Bb2+leqxKn9r3AGZj8akVXpoidJJ9//jIM4KZfscZ5 Xmesmd7dy5jBXC/LRHasNz5wLSPxFvJ0pYoNT28MiApW7VKBaYSRPUnvsg2asylZjNrheXaZ4pbk fUTw0iGI2Yy8nq8snGmfMeEXUHtQxA86iAO4nd/uMXcv1oM6xwjnIkR6IUBC76hRI2CayLgGskGu ZtXtbUE1dNcp3SNMzPq7ArEwGqHrggTBR+G0yzDLY63Nbkp+ggFeiCHPRcThBd+2ncC2Lis/mB08 IHDgz+HWwDfDVwl6WXvr2VxzTxTONUyD+cOiFg== ) fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 4219 fpki-lab.gov. nS2xWGjB5FIdzn2Gxtcf5/bBkttG1GZInA//zzSmJ5Kx6BSxqjx+/xgraE5pn3wg8aAT8Bg9GzVX EyakIWxYhvnL+m+NDB1ab1znk62qA0KIyic4fOfY90VxPBMH/mFVvp6nWo2xUJwy+XV29xJWFEv+ 5LWlO5fikKziY3W20Bm07eM1sCVMfeG8n7uX02hHlnZUpgpe76no4+zGuLm/KiCSnMX3/3I2Pub0 LsMkIzjWvgzvzzHhZ2WE5pAfngtBWqVgmp3Wz2bQcb7TTJtWI98Zbrkm4KPOmI4e/nxmNjfA8HVO vx/rIiqjBjnhPMnY5x55+ZC/Vl3EkT70lyWukw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for fpki-lab.gov
	`fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZ+XqJdNfVGk5amEnSmlJPJmJ26Wg262cifnjR+Oq3ZaOUIOTyNVGHzBG4eWWVRMkG9vmZSr UZVfAPRbkUZWSquh1RaGdrx1XaZj+d9BOA2twGOhkfESPbPpI6dFUnqJIneUq6SSRKI7ONkSa+mA drpU7HcOMsBdS+0yJPue99UK4G4uo1rJmB9pB2tD3L5SAWHo/OXxyhu4E/CJMweJraViG5N2V3T8 yOco+yPInNc2r4035WgqsyyY1Wcum0G4HksV0iaLhAWHoM6+CvZxOzLQQXvXSg0InmQhsflw2A24 o17LJaPR/fIlgYF++sGR1egHuAVUPbshm5rq6pMrfAk= ) ; keytag 28656`
	`fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbV26k5g5poACNTZNhVWob1HcflDZzxDoygAYWF1C2P+CsJni8+Qpf/QJnS5mZ2BMKB6i3+I ygdKMKRfiumRyei/rfhIAEEbiCYJwCgx2pYuC8Opnprn7QhUrnee+9Lhf2TVwXKSDaR3Z2Glh70h bPsehHzGaGf/fnlWapq5IVaqtXQFLG2jfsMfiYcLoB8Z2GbNyqrzsAS9SvU6MlwaXW8D193gKI0t 934GyLo9j9D23XzbJsfiUzj/0O1VeuNiRAdF5Kn67pESgoUhb3ChaAXmsIBrRbkLn5O630Hp30mu vNH88yVmByAIedbLkVvsN/M/QiNrYzydF8go0cF+1R0= ) ; keytag 43725`
	`fpki-lab.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbTJCjYTkHbV7xsiNml2EOdNL/rXvZlKZIRK47qkCLvLW5NxZFHEA6cmMcYrhm9DfUy+5Ca7 rkQjIbHMrb1YHVf9wYaud5wqJDY9jG8X3MLei0WaYRw3gYPrSbqbfkh0K3G++pMxxFXQTU5pjkPh gfs9pshdyzsuOeFJKlvd4a1Ew4Xsn2cyxH8r050GGgCuPsRfyihzd/ekCrM0N68ROWgCiH6SdMBa rjcQTueFZji37ImEJZX/nl0mYZPNzd28EgCHd0YvXS4JD5EdUf9A9sT02OqcQZtgg/tGCCYc9LwT BYm4tmX3FenBgWAF90/d8kPXUkdpGPUEH74mji+WdNs= ) ; keytag 24183`
	`fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc3kg6cPi9uUB0/2IGZvH79LhYgvfniZPVvKImYxZxYL4BWcs4E+Hv2GqU8M0rYhYfFhn1d3 eZbfXBybsWOBUHyVJXwhJZlHBJ8Ud9ANCJ65CFebGeecSsxfT0nvv26apY5zMQxU2nyUWbQ7vSnK 4qSpZRfRxGbem/4VrGTuJ58nog7XuyYLSGXeEqPtG2fo26UjGpUNLbqMurCy3wdmHl21VbM7VhYl p9NQwO++bEDpS1hsUOoNkbww4gNWqN8zQjgaKyUZc1DFb0b2mfkIO/4Qbi4u+Uh9v74sm++erLmI wc7HywqRQfvdd0sI2HyZ1xZJVlauyg/XkkUe7zH2Shc= ) ; keytag 29035`
	`fpki-lab.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbCNjou0CVWFCq104UMjYxv5hSlLSAEo7q6vSlXx5cTJnvrlrtX4R6e5pfqmkBP3Jr0847ZY pWcf/OR0lepRRVoz6ELAXpm/pOr11S8B14UhvewmtcIPSsCOZn19ggkHSkfyRJ5Z3l/8i+1galx+ o3NbKDNK+t3ISTa7PTFxvaWk7IgQvYE9fy0UKmIFFWEe4OM/7MCtVJkQfsp8foSRh8dIiIMvhG8S Ley8tLQs3zQoJJGxSH6nHgTkuLbcc1Nrwu4oEtW9txo7xXgpGgk6CLRIGI9IgmmXFor7j2uxupHX XSVOu4Qud27imlPD1KdwNUVsVNNhRXliyh8wujk8+V0= ) ; keytag 4219`
	DNSKEY=29035/SEP is now in the chain-of-trust
	DS=29035/SHA-256 verifies DNSKEY=29035/SEP
	DNSKEY=4219/SEP is now in the chain-of-trust
	DS=4219/SHA-256 verifies DNSKEY=4219/SEP
	Found 5 RRSIGs over DNSKEY RRset
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 28656 fpki-lab.gov. SnERtjKX1xDH7ryyi2VKZdx7xmHesNGYYB0Z+nW+74QHVjThwTBfL8d2rdj+b5mQPRr48sr66EJC +15qXU0K7cRpByY1o1hTIPpUQqrW5/Wkos9sGThfxPt+g6Fv6E1pcTxc96+EM6AKeSvyABEPHCME VfZ2VXV3tNU58n8A/wA54Th/FaAbg/1caDxSGbdT0xtCJRfuuVRISZCYnKEi/deESZuDrAZfqVlf aXHU67Lzkhtgq7o656ombVFPQkoBwDmwh1czOvrCl6kUudBC1AD+MqlH1nckUcTotjqlIX05YY6F 9zh7ZTdLk5yV7Fnz+UI12vP/dHajW6Bvq1BSDg== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 43725 fpki-lab.gov. bDO7EkiMs6NSr6QLnnzWu5+CDtte7DC3uZ87mqCQEm0H+E9gwmDua6vf5Aj9YMChG9NMM7wUCEAr q0P4S8niygmvUmZm1yG6/bvwP947C79DopiaRmqmz7g2cPxbRuXFs/EC14acYuH2krDt/sxPkc73 l7Y/dgqE2DLfnd5/OETLLq12BZCGLAEt34Qb9DjLApvvag2vRXek/DKQzlU827SZt8N2I3aPAFEY lQFTTWLacSRVhgkoE+C6RU8Iv6ArHT9M0JT/fhJx7wEfmSmkHHccOYJUSJzGl+rqpFUcumgFrtOw L0ZwpWTV3IbZhRmoXvH7FGndz2s0Em341isTaA== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 24183 fpki-lab.gov. pxHK3gWQLK3V3LJj2+tXj91c1x1Tib09rSD1pu/GsgUpXj7a1vLGZkKmfFbyL3s5YNcdf9DYvmgA BdKZCniwdfD8V+q7VvVWYdgx8Ml593qLsmthx6nIEfXqsFUocPO2BetVJYt3MSieKglMJYEakGoq z8YoXA6c/YimCm/BXKthmvAHFAV547RuBXq8G+UcEVSJ4V/3oxmpLIlGTJELew77JJj90w6cDmpt 3ni42l7SbnOMW+iSJ9fcBfpZLrVBQ57nZ/4UPiVfkuufJ5IKsbBFMt/UmalR1Jb1at40fgqc9vlX 9kuX04PAZjVoaUYCjRR0ix3cOe9RjNWJi/XaoA== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 29035 fpki-lab.gov. trPbOM9nX0QadN5VkRR6GF/9yFJFACEib8Bb2+leqxKn9r3AGZj8akVXpoidJJ9//jIM4KZfscZ5 Xmesmd7dy5jBXC/LRHasNz5wLSPxFvJ0pYoNT28MiApW7VKBaYSRPUnvsg2asylZjNrheXaZ4pbk fUTw0iGI2Yy8nq8snGmfMeEXUHtQxA86iAO4nd/uMXcv1oM6xwjnIkR6IUBC76hRI2CayLgGskGu ZtXtbUE1dNcp3SNMzPq7ArEwGqHrggTBR+G0yzDLY63Nbkp+ggFeiCHPRcThBd+2ncC2Lis/mB08 IHDgz+HWwDfDVwl6WXvr2VxzTxTONUyD+cOiFg== )`
	`fpki-lab.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260401031715 20260325021715 4219 fpki-lab.gov. nS2xWGjB5FIdzn2Gxtcf5/bBkttG1GZInA//zzSmJ5Kx6BSxqjx+/xgraE5pn3wg8aAT8Bg9GzVX EyakIWxYhvnL+m+NDB1ab1znk62qA0KIyic4fOfY90VxPBMH/mFVvp6nWo2xUJwy+XV29xJWFEv+ 5LWlO5fikKziY3W20Bm07eM1sCVMfeG8n7uX02hHlnZUpgpe76no4+zGuLm/KiCSnMX3/3I2Pub0 LsMkIzjWvgzvzzHhZ2WE5pAfngtBWqVgmp3Wz2bQcb7TTJtWI98Zbrkm4KPOmI4e/nxmNjfA8HVO vx/rIiqjBjnhPMnY5x55+ZC/Vl3EkT70lyWukw== )`
	RRSIG=28656 and DNSKEY=28656 verifies the DNSKEY RRset
	RRSIG=43725 and DNSKEY=43725 verifies the DNSKEY RRset
	RRSIG=24183 and DNSKEY=24183 verifies the DNSKEY RRset
	RRSIG=29035 and DNSKEY=29035/SEP verifies the DNSKEY RRset
	RRSIG=4219 and DNSKEY=4219/SEP verifies the DNSKEY RRset
	DNSKEY=28656 is now in the chain-of-trust
	DNSKEY=43725 is now in the chain-of-trust
	DNSKEY=24183 is now in the chain-of-trust
	Query to dns1.fpki-lab.gov for fpki-lab.gov/A
	Received 1981 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 1981 octets ;; HEADER SECTION ;; id = 44496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2026030401 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260330074335 20260323064335 28656 fpki-lab.gov. lG3ANmTm4BEs3ERhefJAHGksPGDSTy20SnVhgqbccfecdHajeStD/pf9xuhEz96C6KNidBTrVg74 eDiJ3qepLtz+wHmYVsST+JtVUdcHsBRd4W9gi6u3LQLEK1JL0XsxgMzXywjoJJpY0E9tAhiev6lv p+hP6T4dh1RR3BorOZzs72s+UUU/oTjkTJox6zAOIxYUz1kxGevx4cGGYY2nrgkbS+spJY/dj2SU 3ZA3NpysUGBVQWJW5mikqGivXO6EQqwUdn4vI3M8zXQarGrOe+nhU7UalqqQm5V6VabH0IsT2+0s YFKJowXzbXilmRFER6Dd8kSJ+J8XwO/Vm+7SdA== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260330074335 20260323064335 43725 fpki-lab.gov. NnkkG/7TkB5GStJ/0rcxrjENSC5HkVqwOqlRnFHtF5UvCWIZvBaLJFdHOyTN0JaKVskyxEUWBxa6 GtXOZ9WQKVF3a+GzFm4+U8iAFSiAjFYg8gHqZhkeYt1bCI1GOTlcKkr4Jb38BIkgjljChksf2YhP eN24f9FXLg8K+V9igUfz9uyiM531I0iHLC26Dlfqn8c775VZW5kyiqKlpsbbXjweUtY3R2bSTuzR oXTv3oadWZxMRtR62hgiz/k7MyawYg57WyEa9DDXJgFOOMnEii2ERnPZOwsm5qUXYrDXmeCkMzYO qTjVWVmKp7kgxuXxWPUk0XOLZ+2ge02STLYpQQ== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260401031938 20260325021938 24183 fpki-lab.gov. eSnoycjlawMMKYb981x0Kvva1VdzHF1J03Z+28IY64jpRtBaN9VcdO+cWZGWDno6UVPpMoC3BakV Pf/ryuPBNnt/52Qvx/6qMKxBjn9AzahVSwB8YwB5xJu6FupeMRCg/NWSZI7rUOePtKittw8chHtr iLjISjtruroQyEAeWhCDHWk+jah8VQL3VbwpPPkk8b50Vdc4Cl/zcvUBaoC4PT+lD8kOELZzMM8d a/g6w1KezevQSfhj3OV4zNKVPUk1IOQS8lJHdxdrqzbOmfHU2gFGRo/xJHvAuBXzfnvaXZHCfshD srOfWRih2CG+YYVqpzjeJsSAWEE0f7N5nsuRKA== ) pd8apa43r39tpn7smaagg685hov6aqgr.fpki-lab.gov. 86400 IN NSEC3 ( 1 0 1 e5fe88821f470069 pd8apa43r39tpn7smaagg685hov6aqgs NS SOA RRSIG DNSKEY NSEC3PARAM ) pd8apa43r39tpn7smaagg685hov6aqgr.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260401044406 20260325034406 28656 fpki-lab.gov. XX/IbPrz7c8N1LgTJThy+nV6v0iEPVVfAX7osHa6Ei6i3cUMxkuNrHoWEvIQ2mWrFD/atg0mxhbh r/whJ+QBR+MlrBABhKr0uNVNKM/jId5SIGKzkDd79I/hqP3OxarWeBo57fTRvLHnM2Mh9FG2fvxh UaN9/fvwV5y1ETbN4z/QfeIAo2A7dZe9twytA4rSFreJZXK5l5xHildbYoTw563j1xVPaPw0An6t SrweU8w0G/MRpTVl4B6nrjEjEZ5GmClJqZpshU4gwz7JP655rzo6vCgWm1Q6AOXalBGBogSw9J4W MKhoFv3nLtaaOYHOE2NBiZ4jXWqL6HMwW6/+tg== ) pd8apa43r39tpn7smaagg685hov6aqgr.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260401044406 20260325034406 43725 fpki-lab.gov. TV0nW8DUEcic1yMiQOyu6in0705WDevw8elR1VLP77VJVc723sUf2gEpsoKCACOxXdaxSvKh/eF5 e6aGm9Sg+ApTfpDGFSWeFl9iwAMISJITk90BpIjjn+WmIGZD6jDCHF4F1YBuRJG0EySL9g6ePxsZ EWDw7+Ldno7bLP0PS+k9iEt5w5rAg5xvxDYmkMUbVpAeez+AtWPoGi1LFm3oeXm0EsAraoxBlnRV fqz/A22hrb9h8ogRltDgfQTpZpL2XXWVpesdi7iwm+alay2XsXWa3UgbQBy9qcjf3v0FgVul0Lol XvWeWWAQ+8dWQZsTIxyzoF7LyXdjMAD+ohb+vw== ) pd8apa43r39tpn7smaagg685hov6aqgr.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260401044406 20260325034406 24183 fpki-lab.gov. qUgdSVLSIgcFlWHBDK7QQSvodxIJZVvnebQ3WZrOU5qiT0fZMyLJxv61QyGczCIFtVep9tQF7Fnv WIJeeYweVj2Ti0cZmB/CgCFeRJaCRcftDcawLzrWM/V+e/7wc5Al7m5H/zW7Nos7ivEip4vVnvlR bW7hKpfAaEhVnAFL7QW4XunEPWt/BG3lHLcYv/JRIe8zJZePYQdcRCOWbsUG6B5I1RCanii6+iLS 4kJ44GOj2l5Mgk5YcjBfycBbDNG4NrA7YqOBeaJroysCnR9wyvTWBsk4kGpOpRel2kHnk2m2pP1Z bowADNoniJm3E2JqKlxL8JfUl9ReexE1BbdSyA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.fpki-lab.gov is authoritative for fpki-lab.gov
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns2.fpki-lab.gov for fpki-lab.gov/SOA
	Received 5614 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 5614 octets ;; HEADER SECTION ;; id = 27425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 5 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN SOA ;; ANSWER SECTION (4 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2026030401 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260330074345 20260323064345 28656 fpki-lab.gov. LfOoacLBwECsxOwyxbnjWKZC6rS/W+2EzkkfyojX1yaCb3gQcuRBQgsYT57V68iQ0dNopbjsHK2W q66KmK8idylXe9bK619ObCIY3dt+uNcisr+gzuDzdq9OYkGUiXdpv8GkssHKgqXgD/EH8hgxE4Gw kHcInZ4U2wQDsynrmSI778lW1yFRFV7p1Ey8+pu5PvC+yD2/al0sT0dqEXbzChEdGqBk5C+Rhxlp Kt+w9U43DPBvg9ZUtPy2zV4DZgAnzGiLsLjJlcknFlGz5T6xiKiC4xyCVMxD5e5EhTmN+C9S/Xhd CJSVcC9VYqWIznwSEmgeA1An3SrETN/6MTTmrg== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260330074345 20260323064345 43725 fpki-lab.gov. pHMX7uvt0x08vK8/zFeGeYwNuAKsczqbWkKwE0h+B5ugUKnLyFAMkJuctWYa1Ry5U8f88CsOlkqQ qMderqO+N/FArHDdRbvj2GkGF0NIksVYcfQ7fPaLdBDB0gx3LbZ9JMwD/YNz4ZSzTVX+PjaTPz27 I7k72otFIKz8gG9j/9vDXXa2qq2Z2GOMkMJWhDl+4ep8HhvWRC0yFik7TcYDBLJoBxlRxDMbdIPq cGrcsYG1rnnnPiZf+TtIgrEsuaijsO+ROejRH+tJ1E2C+U9ZCWoJ8DxHvLLl4d3T1nwQ7BgNj27I 12cpdgt+KJbLFbn2k6YsQdNjKwp0pQXVj/+EBA== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260401031705 20260325021705 24183 fpki-lab.gov. UQeIkoZUft6/g2RvUwF+9i9qW+z2HMxyt077F+a3dxQKGPyHlvSiC3ipfK6T2p9itRyUnNxDQQeL J+F/2kT0EyF6tL31eLm8NdvrpncQXTxuY+rJf2Lwg5VtYmT9oUxiyZXbcRDs3UyKd36O3fvmRvE2 WcDkLUhSt9sMmfnVxzSX8CWoOACyCMlqFN1BVeAcw/Y90+hVPXbXLOZnz7RKx+RF5/vmAkQ9GSQa hymLOz57/CBD+S8IedndrdXpV4gjO2YkkH2gv4MM7TNqV5mInXeo6TnaZfoDbnQ2oLlPCeGpflTM C5pgWCH6gz4Et3/MmkJicgysyYKYPfR/Jrxh9A== ) ;; AUTHORITY SECTION (5 records) fpki-lab.gov. 500 IN NS dns2.fpki-lab.gov. fpki-lab.gov. 500 IN NS dns1.fpki-lab.gov. fpki-lab.gov. 500 IN RRSIG ( NS 8 2 500 20260329011804 20260322001804 28656 fpki-lab.gov. GzyxOJA3cP+6wjbPZmltRrTyxTH//YymdPDaHYYzQsp0KSYKGfomaUnRQdHWGuOA3q5Zdl7PsRD6 4wBknEQ1emBl58nPP03mTJaayN+7zz238l+VQe3HTWtrUZDdbkUTkLk1X7I1gZ9igGpnwyd6Ch72 l/wmPyh/PeNI1xRE7LGhoWrVsyCqSjqcKU5GGBN46H7cJ1YAtDS+hg0ESLGsLAqeR+UgR0D1YspQ GjWVfjKS/YPELIk2V7IWI7SKoP22RDdr8BDQm1LpzzgrTVtmzNRtDSw+SltRj8/Vzm/v1TTvuKX0 PsIGSAoflGRMpNZP/39VjNjhCzonxcw3zcLB1Q== ) fpki-lab.gov. 500 IN RRSIG ( NS 8 2 500 20260331031859 20260324021859 43725 fpki-lab.gov. c+SMJrb7ONWOnGO8cCfXhIrHRK9g2XOQ1bWoNtuNGL/ZGvUjNGEiWBfhkx7mEKJ5bxsLPtlnsOuY QpLJxTgzEgHSXEZOB7RQHRoovGySSYxbj9N/p/kcJs46swUWMKzaICkirliGEi1rOkfS/IyE+Xkw w/cgic3CBsM/iXYP0gZbmCUyT13pEi5m2vv6nRLeKRhg6UzcyhfJQgtG9hmRAvgEJPvDAdQpV/vp CIFpXpZhxxcbcnZoI6OeVrExBkvGwxrEfu758lmshXilzEV2M5ZnUPbVgIyQ8dfqM/IMcLDfLwtV 2L+KRbjgE836FON2CJ/xxUQ2SXHiLmdA5NTqjw== ) fpki-lab.gov. 500 IN RRSIG ( NS 8 2 500 20260401031743 20260325021743 24183 fpki-lab.gov. QAHnWuvw/EcVCKBym4rKJ2QqECHw+7HrZPtCgHrpWgeKsa+CBlMOoD2SbPDG4ICr5jAY3mYJAl3E v45iVV1xiD0JvBryXOAjmBxGITaFJGWxzO3ubT/VzXa3GosRo7sgDoQwelNEQMsKLwx4N8+H8h1L RNdClzi9MOzArFH1rpmuHs8vXvMzgQQ2bDoB7WOYKc9j6OCtYlnBzNd+aRzDhMotsdoEcoatL3Om u1nsx+80NWJF/IH3+aDLh7QJk7MVORKf7hycUIOrTrKkYFBNmo86K/tnoevT4VYE72CI7oPekkeo TYtrJefmGs+z+ih02PaJ8ulDN4Q5ocWZpPbkIg== ) ;; ADDITIONAL SECTION (17 records) dns1.fpki-lab.gov. 86400 IN A 199.167.92.100 dns1.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20260329011804 20260322001804 28656 fpki-lab.gov. PaD5ZxqVAQvpcx63SvtXOfOgWF4fmkXg/AiHyC/xrhBQTv0Q8g/P7+a3a5jfw+nXN4ScCQBP7kzY 38AEuvlBe17pUODbsPHbARRzONHwQ4OUB5zRwGitaleWAjqKKpZ36ts6HPtfk4mEysQD3HfG7FEO Eg6VKaQ6oBdkJl51J9d3gK3kHs9MUA0cP+sVuWUSfYQvlGB5fyAjE6ciB4J/SXC0AOu5weakinwQ qm/nQgMy8+jx7PMati439SOYfQZ425RJ/9g0u6PVDENtfQJPb6uQN9gAO9rEMXyTqwYhM6+NLKBb tdOR5ak9f60n8l1wNayP761cM+21pKKwPWPTQw== ) dns1.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20260331031859 20260324021859 43725 fpki-lab.gov. ZSHZ+rX8trSM0JnoHlU7fgCQ8Gl9xLJ4ZLWsrl3rGFWEUVLp8OV9HYIdWFKKo8cqn94xxIv0xJ3T HHcXh0tvoTzq/3tm70/RzgbUVOlDDsR3s5LT3Fexi3P/MHG2cr7H7ASUfYezNlK4o1cX+mhnqwrF H797QmE4HO3lqQ1QH4qfepaUb1Js2FgJnZO9D9wYCYBqZ0F3/Tki4K7lTi+I2+iNhouLN4fdHZp4 8VCWR+81U0t1yNYH/5c1MXehCHkqgWkgo0NpU/CKi6GqwJDx4zeegy0MmihFXnRNuaiam527wsCD V0GB5GKd0a6mRdkl5JKubRaFJleLita5gA/xqw== ) dns1.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20260401031743 20260325021743 24183 fpki-lab.gov. OcYuaMzEgmLuhbvAGfqyIOmzR/fOUIIqRmlFz0GBq5HTCfrptqVxNj9KuiXPMEPcUV/3rxCW01zF 7KW2TSYVD9/abrwSKr5/JwBxKYIFP6W0Ns8QG/N4HZkVolzvPaOPK32R8tEOUaV9HMsf+hjNy5d1 thbTLdpNaQ3ofkZBoL3XMIeQqZk6U/KV8K7R4jf1+rd33qSoVNhFc0YOlW5Fsa3J6r2tchJ2905T OryYeIxMihVW0PgQ/3P1/mEu8x64kiAdxt/U2YqXfsV6e0ZUguRP2TKYAsHz9djQ7WLmxn1oUhSv AGAHNY+IwDQriuOrad4yt6KKIxByjXrj6iHebg== ) dns2.fpki-lab.gov. 86400 IN A 199.167.93.100 dns2.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20260329011804 20260322001804 28656 fpki-lab.gov. Cccr0QjZcQLOnWoFfwiJJUhh/LvbMqfCI0iPxEmU9jqLzOutTeGkskjdYRkjs/Ik8e/qIgsnRaII Cnn2nH3g1RBpZKdlriS4kMzL5X5fn3BakxkOzCRowwBuSst1dcZDJvp6hiruu8W396wohBPPK4TV H1DcdXSRf2PsOa4k1f+iNwYWSwhI94pBHCSBpLCQyMuHsAdaW2T1gIZiDB3MhWIbtmdtk9Ayz8DR gg6XSNoLOCw8Wzeb7KAGaRkbXP6p56Zcf4JrwP8KGoSB0bD7Osyr5aIMsY0rVXHfoBeeT5p5cyRI jd6fWq/t/WWE9S5QjlezeRWlsiMHsakUi0KQ0g== ) dns2.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20260331031859 20260324021859 43725 fpki-lab.gov. XFrgww52gapVlRj5DZsOEjengsHwxQ6pPNvlaNyT3YTXv27AWy5/Lru+wBShrFLGeJxNNV6/d4KK ED77nfdBUaNHAjRdK27GgqmQCWT+R5DpaVTyvIe7bB9sfaf6CRg5omlotZ+QD8KEBqKsHcv8z2Hj 4UUZp5Zf2iR4ue2hDlPG70Zr/yyV1MNM2lcMqfjn87vRmYjNd2B2PuGMKRv2F8K+tS9lB62DPLvZ 887KIb/0kVGG2VFVkqa+8ZSAegAG3OzLtOwQXYuefeqtwf9BAvO2AZRPb1Zarjhyma4aYwWxfZut LC/PwiFTho8rvaP3T4gX5rWcyFK2Rg1q9UmEaA== ) dns2.fpki-lab.gov. 86400 IN RRSIG ( A 8 3 86400 20260401031743 20260325021743 24183 fpki-lab.gov. qMYl/nbvbOL6iNALIlF2V3jL6dpYDqXBdKT5Yo38BNjZutB3/+tSqRYhL7sqrU/FFHRqgLNDAwz0 WAUp/+VHPxY2v+FQNPD7K+lE4rCCOKRW6N059pDuUOuzQFwVHJ7hlyt7hZKSc2nNu87fnslNDb36 XMQ6zeN3kbMhypOx8Xm5TUQxTaKeoMCN1Fx3x544iJD3qNTmi3a/z2W1PN/KzniyrYfLcolTdHs2 Efa1r6OxXTztr+BHrOSlT5CUlpo25a2Au8r6oN2tSE3kJr+v3z0490Fd1wX806XZ8ySFwshwI1lV unJD74D00X9RCCiVP5MtEUryp1VRySSxwEVuog== ) dns1.fpki-lab.gov. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns1.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260329011804 20260322001804 28656 fpki-lab.gov. EHk61VxW1vinmtrZqOro82n+qyX0jnwnQQErF8Og3J15yPTVbLb8w5dzLJanZKI5BVGPRLTWyZ4h A5n0DF3ShGs2xE2lMvJnMr9u5aegEDIx4Ju6Jxg+hbAdcSqJJmK+/qOZbYWPP2B1scFoGC/OhcEn 0VfP7hcQqnpmYobNMYXqMQ8580xhFrJq34jWOGhoIkgrZrkcTj4+grvaLej98kXv54BY+b4Vg65I WMFip4ENHoofgisQmkdYVlJ7eAyesvYOveY3OEJ3RAH2ul73K6me0/LWyjfTiehcRRUggje+OdyS 0kayPKIHyqZxmEr6DxclJ821Vkkafw8iayZCeQ== ) dns1.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260331031859 20260324021859 43725 fpki-lab.gov. mtzE809VxRdDyg6q42s+GEmIfmpaK4p9MDD/VrOq2N6bEkX6mKWokD9ca53ffty+Q+Rel3D1q2rx PG9CfnY3s4x/mNNh2ER5MRI7EXROmubpbrPyW+IKb44gb40JfOr+fJQcbnFUSKCTl1iTWZNOxUKm pF0P1n89CLUk3YvnMEsEZoyVvNw7fufV//flFD0kK0OPoGB6dvsdz0Vsxj51zPl3HP3YGhw6Jvu2 YCWMXRElI7stRowZmnAnkSR+4/QLUncK5x6gBPzTWrV+Pv+elj82tiBMdeC48tOny3kVKLhgDMjy wRloLHPeNkWzIhT7uz5vae9OojRAPSpMWeueNw== ) dns1.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260401031743 20260325021743 24183 fpki-lab.gov. MIe1HlAPdgm40+PB2ZeFGYtCHG141YXpJD7x71vkuLP044tLmx291auSspT1Xyw1nYXsrDFI59t1 p0CIpGBnCM6Ey8qhgOTl00S1TGmZ6hZpxrzTAZQs2zg4AhFWXBwWeWyHB40VDHJvkvDhy6GAQZNv kUg6261UgB5A6lgZ+lojqAlAR21U/TqxaVt7iDdpjG1YgQPpxgReyIsrolQWRhH8FhWnsQBqqMI2 dWhPVkXD65el6KJDQCkWpAnJTHwLVCoph7hfkghmjOJE4G3CzFRThiHViyvbv0yQsx0N52SLjeez QMV/2bD2VORLTy7uan0jeX5n0T4dCHDk9dd8wA== ) dns2.fpki-lab.gov. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns2.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260329011804 20260322001804 28656 fpki-lab.gov. C8DyOJFAiAPGUcxyMPbL9+YzPmtdAshiA/893YVGJQrW8Pslft1gHsu6uqjzf+nB/zTdu9zM1MKQ Dn4sLYPaqPF53FYo/aoE6Y/xZkWu9h2iVK6CT3MUrqyH5Et+sJ0UsI1LjFgpDrp07agrGfP9173z fOTSYs9C3alqK37WSCA5Ct+RVp8q5ARYXPTNlLTUFk4pc6o0KghL/GXLfqMBVrbgEtW0kD2dnfNB BGR9fK7r9WNN6k4KK7a2E5eFoSF6EvsuBt2e9CsRM7czOsAQAGvfUIpgrjixMtysbycIqBpV66PZ HyCHsRfm2ryVsmZXisdRh4xRop1jiSytMm5QuA== ) dns2.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260331031859 20260324021859 43725 fpki-lab.gov. BvkG8/B5zAHEs68hr+Zq12ECez72JYA92HOf2KMkqSi6hsObN7prOLrR0OsyH+Wz0o/Lz5IVpwua IY90SadbRMQplPHB8bAG1yD5w5IMvbw624mJzK1DL/C6Z9ni7VSgz0ruP5ki3KRNxx5a43iqvsAy F98CUD7U/YOwld8IGMYXMYOrrQXEdFja2tej7ohn+UionwetXd29P1CqHU9n+fvcDBT/w9Lw4i0v pY5OKqe3XuipVDRNieKSAKK/2hZYVHOuuVeVpAGO5WDVbsz3e2P/AppiWNk8yelBavHkvceimSyJ iR9ssSo/pA6QOe9DJbg+j+57+VA1q9Sj6ZwFlQ== ) dns2.fpki-lab.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260401031743 20260325021743 24183 fpki-lab.gov. UeSWQXtzIysZCcr38s0uKgsMVeap2GrVqcMZ3gHSIzMi//+Uq/foN/JIj86rLWPWN5hKYWDofHjG IpJ6vxMIH7+39Y8YnT6t6Pju8gDHgQ1LfcoBmtnLoR8BzS5j449fUgjKpleGnqHPMPg4kXWnsLoj raAvtdsk/hrskjF8qhXaAaKdpxJH84LZ1zEQG6kUJ8KAes831YhXbH/A/RzzhoVlISYPhwPBcNCu LWk0KlbjYngFrg0Bd/FIZ5Rhc557Y8y/C15wijOKtJEde1C3UPoT0p5jQKyFZxNp8zn3AJykDW+3 i8M7oCOg9sBTiFiTA9DkdkJ5EvlvhF6nuxRQcQ== ) ;; { "EDNS-VERSION": 0 }
	Query to dns1.fpki-lab.gov for fpki-lab.gov/A
	Received 1981 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 1981 octets ;; HEADER SECTION ;; id = 62685 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fpki-lab.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fpki-lab.gov. 86400 IN SOA ( dns1.fpki-lab.gov. hostmaster.dns1.fpki-lab.gov. 2026030401 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260330074238 20260323064238 28656 fpki-lab.gov. QfMvWUP4rPPDmFMZs/2+Djpv8hPmUEtTJki7X2qEhQ6tW/uQlFtkGBy1iwEg5H5VisrhZLGhlnkl gJCmysV6Pcemf8XT/cTqZNnA44qptQCLqwWmjNRs41mB3QnJJ9OtVbN7mhGh+vn5BZb+4UISYo8G c4ZFePt7B5sQi/BUUUovXLAJsitAsb93OX6olQEocCc4aSvu8I70RT72y1yXnjDRb87BpZobKsm8 jmxLnU5mnQiPlCzHlfr5Ou7635j423/pIvLQhWyXbOKMDC4vM//bYumneaI3JcNe7ewOHlJRENkf cre9aO53iVcejYvyoiwJqrQaA5V8phmQ47OGoQ== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260330074238 20260323064238 43725 fpki-lab.gov. ronxR3MMwVOCmlF2WhKvj+KPj4Kj1DTG/o2vi/mqpPF2CBK49DkuNNpn7ZL5eUOUFXDl3o06WZ5f K4PXp+Q3NcoPdPNhi4mKbePe2qm0k5ysqpsMuiaImxVo5M5jy/RtDRItxkKQRN+Y6u2oGPvZWxDw 2Z/DIWFeWS0WmY4ioNk5I65slC816L//95NtXQgIohBsI1Kcw1xf5Cb3mckCNit5g+Z2255OkyIr l4IMijRcr6tO6Dr7MQYRdLUH8uUUzqx4P++LMpwIoD8R2IhCYhcC7EObAEjNEwwgqJvznguiumFn 969crtxmOB9/50RyJuoTdRF3XZ7g1c9IwaiZEg== ) fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260401031746 20260325021746 24183 fpki-lab.gov. H9uNWnon3bSbs6NsdfS4o7v46j2i9Bvb2tsEgHeG8J7Zf8P2Yfaj6cwcaHlZve3Gyocq1t1r/GpJ LVu/ejbS60wCAApLNBDQH01tFRoUWi6pIEimjAJ8H/WMYj+0IF60gZvR49uZd1FyOm5JOoLxiTNr irCIdkICMe4O5JV2/vIG8ajKAFwnTZ7zFLa1DPv3rhW+uVTKoRpaMSgcck6rkCjnLrqX8KH/SQs+ iZFWZXwNZyGKbh9wJ87coKeiFyQEO5oyeilFOSQlI+dDTZpwnuCIFaxGdRKrujoPipgGTTrz8JEE XSsNpdU11oBdQSIZcAv+vxQs+PROElOQHxDhww== ) 878bp9t0h01i51kuqkl48k3g72o3vcjl.fpki-lab.gov. 86400 IN NSEC3 ( 1 0 1 acd8df29cf5b71b2 878bp9t0h01i51kuqkl48k3g72o3vcjm NS SOA RRSIG DNSKEY NSEC3PARAM ) 878bp9t0h01i51kuqkl48k3g72o3vcjl.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260401044407 20260325034407 28656 fpki-lab.gov. izFEgl4j8CZLdFRBCNVdVtjc8x7KZuS6ylVtA2dS8XZ2j0UtVcDkG1bQojP8UgBP9q9wkTsXZ+lC 43DeUQXB1r+fxhYfF9V4pzRkfj6sDYjfPMqDtggpd3aNipxBYCbOTiZpwvvtgqlcIR78LLVPO57I 8xOKF/12jwTLRPzsKZh7Hadivbu25arznBRmTzVW05eWZD7/JDSeDbf1c7l09KUBPlCmqcZXalrP gAOCEsFRukvF7mqP0KM/TdVdf1eBf7n/dcrGNmFEwTi1Kww4hOMSUcIUwcOlFOW47eSgwQd0aZW1 8xWuYFPDyekyepQQDJKK2z18BEZRoXACM/mXMw== ) 878bp9t0h01i51kuqkl48k3g72o3vcjl.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260401044407 20260325034407 43725 fpki-lab.gov. OWQVIpV1yC/iE8PbUERz3EUsYbZPfCoJcntVCwaG2PVWBi8Z4l89hi7uBkOxA3JeLysCn8OTcscS Okgo5WzVv1HCoaJNBTbg38ZQkWPk/BipWWovtNDidOSdklG89eDJD44Nwj/mM0YAWKzM5wCku5GH V/XAzu3enCnKdKsEYlKMs3HxJFfrikGndL3GYFELojgjG4Y/n/Osk9SqEqUHbJ9CsYmck965h7e5 vN88x0+msbwIxnNiz0opCuzN8isWJ8/3vxWwNd+Z4d32SdaGg5HRwEOukm+wOVOe7baJRYZhe1ZE A4MS21mYkoWdECZ/bVmzuVb9uypmQWMoYYIrgg== ) 878bp9t0h01i51kuqkl48k3g72o3vcjl.fpki-lab.gov. 86400 IN RRSIG ( NSEC3 8 3 86400 20260401044407 20260325034407 24183 fpki-lab.gov. AjqYTE+j0WU2xdUS/WubL/r0MNiaB0fwc8t2Gbq6ctgZQhrGtDDPZ33OwOrRLo4oeDA6Kbjhr+kf lmeiTRn4XHAAhk1En7zGphFJCSBU5laFuidrS/kughZ0LkY6AFugdE3DHUzj6cwwGfHTQAg5Ic8c 0GPUYCE4jNB8ZO3mY9O+5YmB0Ra+0QUraUT21PkMEBTqgcRh+ModPVgs88PZzaSK9vUyDFDgBSfK FMwIjCcl7sIUG9DXB838bXb2xM5HHxYH7kuflOzfzvYptyU/YgX83om5Hk5A1WElm5O7RjzKyuIL qCsKAEG4LOONM71bhEBZndTvStIKYIq2IIiFTw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 3 RRSIGs over SOA RRset
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260330074335 20260323064335 28656 fpki-lab.gov. lG3ANmTm4BEs3ERhefJAHGksPGDSTy20SnVhgqbccfecdHajeStD/pf9xuhEz96C6KNidBTrVg74 eDiJ3qepLtz+wHmYVsST+JtVUdcHsBRd4W9gi6u3LQLEK1JL0XsxgMzXywjoJJpY0E9tAhiev6lv p+hP6T4dh1RR3BorOZzs72s+UUU/oTjkTJox6zAOIxYUz1kxGevx4cGGYY2nrgkbS+spJY/dj2SU 3ZA3NpysUGBVQWJW5mikqGivXO6EQqwUdn4vI3M8zXQarGrOe+nhU7UalqqQm5V6VabH0IsT2+0s YFKJowXzbXilmRFER6Dd8kSJ+J8XwO/Vm+7SdA== )`
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260330074335 20260323064335 43725 fpki-lab.gov. NnkkG/7TkB5GStJ/0rcxrjENSC5HkVqwOqlRnFHtF5UvCWIZvBaLJFdHOyTN0JaKVskyxEUWBxa6 GtXOZ9WQKVF3a+GzFm4+U8iAFSiAjFYg8gHqZhkeYt1bCI1GOTlcKkr4Jb38BIkgjljChksf2YhP eN24f9FXLg8K+V9igUfz9uyiM531I0iHLC26Dlfqn8c775VZW5kyiqKlpsbbXjweUtY3R2bSTuzR oXTv3oadWZxMRtR62hgiz/k7MyawYg57WyEa9DDXJgFOOMnEii2ERnPZOwsm5qUXYrDXmeCkMzYO qTjVWVmKp7kgxuXxWPUk0XOLZ+2ge02STLYpQQ== )`
	`fpki-lab.gov. 86400 IN RRSIG ( SOA 8 2 86400 20260401031938 20260325021938 24183 fpki-lab.gov. eSnoycjlawMMKYb981x0Kvva1VdzHF1J03Z+28IY64jpRtBaN9VcdO+cWZGWDno6UVPpMoC3BakV Pf/ryuPBNnt/52Qvx/6qMKxBjn9AzahVSwB8YwB5xJu6FupeMRCg/NWSZI7rUOePtKittw8chHtr iLjISjtruroQyEAeWhCDHWk+jah8VQL3VbwpPPkk8b50Vdc4Cl/zcvUBaoC4PT+lD8kOELZzMM8d a/g6w1KezevQSfhj3OV4zNKVPUk1IOQS8lJHdxdrqzbOmfHU2gFGRo/xJHvAuBXzfnvaXZHCfshD srOfWRih2CG+YYVqpzjeJsSAWEE0f7N5nsuRKA== )`
	RRSIG=28656 and DNSKEY=28656 verifies the SOA RRset
	RRSIG=43725 and DNSKEY=43725 verifies the SOA RRset
	RRSIG=24183 and DNSKEY=24183 verifies the SOA RRset

fpki-lab.gov

	Query to dns2.fpki-lab.gov for fpki-lab.gov/A
	Timeout querying dns2.fpki-lab.gov/199.167.93.100 for fpki-lab.gov/A
	All Queries to dns2.fpki-lab.gov for fpki-lab.gov/A timed out or failed
	No response from fpki-lab.gov nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fpki-lab.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: