DNSSEC Analyzer - fpki.gov

Domain Name:

Time: 2021-09-22 11:31:13 UTC, NTP stratum 16

Analyzing DNSSEC problems for fpki.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (1139 octets) ;; HEADER SECTION ;; id = 56450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	DNSKEY=26838 is now in the chain-of-trust
	Query to b.root-servers.net for fpki.gov/A
	Received 627 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (627 octets) ;; HEADER SECTION ;; id = 46143 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (622 octets) ;; HEADER SECTION ;; id = 32134 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (367 octets) ;; HEADER SECTION ;; id = 47090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (777 octets) ;; HEADER SECTION ;; id = 39934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211001190254 20210916185754 7698 gov. MqQ7a3miv210c0eU01hhTvQxhNgn1alx1sm3ma1NOY0U1k6uY5IKrCYjLHvlUIsqbSijtXwhbDal Omy6osEEDGBXuQL0zIHeVZhDLXINyH/FWdp99ctgG2P3o+xpkt5oDBLjwnr2WnQIrYb4rI/Yoexl ghPQFBVbTvxDbDjL6UY8ZCdLGvOiqL15i1wg4tf0GJwoFgtgLrPSZ36AuT4K64f+LzsW8u0fcKt8 fC8Mjp+DCeFj/lWpJdE34pRl1YV+w5yhXWunXBZFhYsXeBc9Hqv//BV5HE7bj3Lo6Xq5lHjTm1OZ /tyQRvctosbKce3vDn3Yo+BNCmLjebLL7tg9YQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211001190254 20210916185754 7698 gov. MqQ7a3miv210c0eU01hhTvQxhNgn1alx1sm3ma1NOY0U1k6uY5IKrCYjLHvlUIsqbSijtXwhbDal Omy6osEEDGBXuQL0zIHeVZhDLXINyH/FWdp99ctgG2P3o+xpkt5oDBLjwnr2WnQIrYb4rI/Yoexl ghPQFBVbTvxDbDjL6UY8ZCdLGvOiqL15i1wg4tf0GJwoFgtgLrPSZ36AuT4K64f+LzsW8u0fcKt8 fC8Mjp+DCeFj/lWpJdE34pRl1YV+w5yhXWunXBZFhYsXeBc9Hqv//BV5HE7bj3Lo6Xq5lHjTm1OZ /tyQRvctosbKce3vDn3Yo+BNCmLjebLL7tg9YQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=57735 is now in the chain-of-trust
	Query to a.gov-servers.net for fpki.gov/A
	Received 526 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (526 octets) ;; HEADER SECTION ;; id = 7209 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) fpki.gov. 86400 IN NS dns1.fpki.gov. fpki.gov. 86400 IN NS dns2.fpki.gov. fpki.gov. 3600 IN DS 36909 7 1 00cad660f7998bd072e5e614ba10e8b9356e99de fpki.gov. 3600 IN DS ( 53169 7 2 a51eb878314c65c94726ef86edcf448d2c8e75c27491aaeab797a4046462b1f3 ) fpki.gov. 3600 IN DS ( 36909 7 2 f526918edb189664b790021666ce2078545d1468a3f2f2466dbb971f7cd6d529 ) fpki.gov. 3600 IN DS 53169 7 1 72c8145f0cd63e776d859e4e700b239d071d6c6f fpki.gov. 3600 IN RRSIG ( DS 8 2 3600 20210929034015 20210922034015 57735 gov. aOIU06Twj/ubMhwsm+u/QjJywnRnDKHDb+DvIEtU0tT6A/Ao6SQJ5NuulIBUF97Ztvtwry/XjidM nosBx6CbPYHnzJeHypfBwgYjSsKAa7TnOFaiDzoXuPXz2PEJpWqTpIlpMtFRVW1F/j5VyrwDCSvo cg/0E1jaf9CiajVR1sD3k0JgdbueTqyN9ST1l826KpRcUbyku8IeFH5l8YCKEA== ) ;; ADDITIONAL SECTION (5 records) dns1.fpki.gov. 86400 IN A 199.167.92.100 dns1.fpki.gov. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.fpki.gov. 86400 IN A 199.167.93.100 dns2.fpki.gov. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for fpki.gov/DNSKEY
	Received 526 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (526 octets) ;; HEADER SECTION ;; id = 7107 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) fpki.gov. 86400 IN NS dns1.fpki.gov. fpki.gov. 86400 IN NS dns2.fpki.gov. fpki.gov. 3600 IN DS 36909 7 1 00cad660f7998bd072e5e614ba10e8b9356e99de fpki.gov. 3600 IN DS ( 53169 7 2 a51eb878314c65c94726ef86edcf448d2c8e75c27491aaeab797a4046462b1f3 ) fpki.gov. 3600 IN DS ( 36909 7 2 f526918edb189664b790021666ce2078545d1468a3f2f2466dbb971f7cd6d529 ) fpki.gov. 3600 IN DS 53169 7 1 72c8145f0cd63e776d859e4e700b239d071d6c6f fpki.gov. 3600 IN RRSIG ( DS 8 2 3600 20210929034015 20210922034015 57735 gov. aOIU06Twj/ubMhwsm+u/QjJywnRnDKHDb+DvIEtU0tT6A/Ao6SQJ5NuulIBUF97Ztvtwry/XjidM nosBx6CbPYHnzJeHypfBwgYjSsKAa7TnOFaiDzoXuPXz2PEJpWqTpIlpMtFRVW1F/j5VyrwDCSvo cg/0E1jaf9CiajVR1sD3k0JgdbueTqyN9ST1l826KpRcUbyku8IeFH5l8YCKEA== ) ;; ADDITIONAL SECTION (5 records) dns1.fpki.gov. 86400 IN A 199.167.92.100 dns1.fpki.gov. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.fpki.gov. 86400 IN A 199.167.93.100 dns2.fpki.gov. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone fpki.gov

fpki.gov

	Checking DS between gov and fpki.gov
	Query to b.gov-servers.net for fpki.gov/DS
	Received 400 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (400 octets) ;; HEADER SECTION ;; id = 28802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN DS ;; ANSWER SECTION (5 records) fpki.gov. 3600 IN DS 36909 7 1 00cad660f7998bd072e5e614ba10e8b9356e99de fpki.gov. 3600 IN DS ( 53169 7 2 a51eb878314c65c94726ef86edcf448d2c8e75c27491aaeab797a4046462b1f3 ) fpki.gov. 3600 IN DS ( 36909 7 2 f526918edb189664b790021666ce2078545d1468a3f2f2466dbb971f7cd6d529 ) fpki.gov. 3600 IN DS 53169 7 1 72c8145f0cd63e776d859e4e700b239d071d6c6f fpki.gov. 3600 IN RRSIG ( DS 8 2 3600 20210929034015 20210922034015 57735 gov. aOIU06Twj/ubMhwsm+u/QjJywnRnDKHDb+DvIEtU0tT6A/Ao6SQJ5NuulIBUF97Ztvtwry/XjidM nosBx6CbPYHnzJeHypfBwgYjSsKAa7TnOFaiDzoXuPXz2PEJpWqTpIlpMtFRVW1F/j5VyrwDCSvo cg/0E1jaf9CiajVR1sD3k0JgdbueTqyN9ST1l826KpRcUbyku8IeFH5l8YCKEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for fpki.gov in the gov zone
	DS=36909/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=53169/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=36909/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=53169/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`fpki.gov. 3600 IN RRSIG ( DS 8 2 3600 20210929034015 20210922034015 57735 gov. aOIU06Twj/ubMhwsm+u/QjJywnRnDKHDb+DvIEtU0tT6A/Ao6SQJ5NuulIBUF97Ztvtwry/XjidM nosBx6CbPYHnzJeHypfBwgYjSsKAa7TnOFaiDzoXuPXz2PEJpWqTpIlpMtFRVW1F/j5VyrwDCSvo cg/0E1jaf9CiajVR1sD3k0JgdbueTqyN9ST1l826KpRcUbyku8IeFH5l8YCKEA== )`
	RRSIG=57735 and DNSKEY=57735 verifies the DS RRset
	DS=36909/SHA-1 is now in the chain-of-trust
	DS=53169/SHA-256 is now in the chain-of-trust
	`fpki.gov. 3600 IN DS 36909 7 1 00cad660f7998bd072e5e614ba10e8b9356e99de`
	`fpki.gov. 3600 IN DS ( 53169 7 2 a51eb878314c65c94726ef86edcf448d2c8e75c27491aaeab797a4046462b1f3 )`
	`fpki.gov. 3600 IN DS ( 36909 7 2 f526918edb189664b790021666ce2078545d1468a3f2f2466dbb971f7cd6d529 )`
	`fpki.gov. 3600 IN DS 53169 7 1 72c8145f0cd63e776d859e4e700b239d071d6c6f`
	Query to dns1.fpki.gov for fpki.gov/DNSKEY
	Received 2325 bytes from 199.167.92.100
	;; Response received from 199.167.92.100 (2325 octets) ;; HEADER SECTION ;; id = 25179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN DNSKEY ;; ANSWER SECTION (8 records) fpki.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAcA9JISVf0o7Rt7YC7Tda1RGk8m2JiB9JANjbrh8BG+dAoQR0WdBEf2NVgU2h5fOGB5RZE2i 9I2P58kp75oWmCOk6t8WfrISTKpWS4Rm4Uzz2qXXIAbhD9Va5uGfEZ3zatZz0u2uAwrGU5yBGnXb F2cijkDKqWqoxfz4RKcpdHrMkezR7ewylu0qcbB9Xa53gLLtRGmmAKo89ckdq3Dk8dKmrXFtxAaA 6C6HM3Y/EC7AzxVCMqsHObW/3SA3ASj6aukNEotk9BX4O4PRH6yBjnR3e1an7gBCljix/td55EfC eF7zYjWmy3Z+jwtKIyrsYhoQqybdxHeetTQNqVDroP8= ) ; Key ID = 36909 fpki.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAZa0tli3cfksD8pKd6NwpDKFB4bEiaamd/UjJnSiSlpAbuUrRyq3YLWIieetgu+Ekei7fwGk Mj1gtLad8dcngdxsZ3K927F+ZdP9Co+Zov9ZsqzWdSOhTrvLnf94OYT3tAlQntrDg0Gb5nY6Jk6A fxe6gXY24wHuf5z5H3dKjxEZ7K4p9jnGqLAVGtFaya63daXfAZKku16O7T+zK0H4WtBfa8U3jiud SAYmxmrY3Wsqmky+/MGxOKyXnV2/UFIFwunavyJ1owhFeCRx/LxpbOEI7Lc8Qx13F82vn/yH/MHE lH/b1wOnxzP7A0wcVCQUsQYoSYb1buI4dVsGHLll6G0= ) ; Key ID = 53169 fpki.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAbp/xIGuyPfHZSYXowpiHeewWyfm8d83sd+GmEoG5tCys7H5brfg/ZFixIkxfg0LZ6HY6GUa 2q/hbJAIm2V78p+MwusCUKtLeJcxUhG3c0aFu5xuws17jnWlvg8fgYNCd2JfgfbA76k3JsCXC16c ZZ/d59Oc5zxfUIbgR+KMydLBLLEwzXsb9UstBn4iOabkpw4dlom7ZfwTAnmIe3wf/9+pdmxT3vJX xFZoKPsThqSBqoAS9wZZqiuvblDWN4ATYAslBZkgXuk6guflJEpDX8Z7fDxPjKf8CezZD+y97rnZ pK+x6nJB+lPQvtfRil9zZp85HpIx/QCwLMy5IeJ8BzE= ) ; Key ID = 20720 fpki.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAadqRwG9qAOkFQptWl+TJ5unvPriPHbFPF9AAeN3KSkcWhwnxnGPyqIimUZpReMI9DYNud09 tTZanSpmzA7DlE4W+fjwI58Sntp2ookzHBTV4PnbU4GHlqTQGGywAlccqGRTmUtA3Y5RqpPFOoIx NcoWL3YC373uLrauXA8PaPCXuE5lexFbCXtPM7vNXHMUHIUwEVZU3N6kID4dMtDmPj/IMmTSpXcm 2Jbhug6Ps049YN0K6X3NvXb4qyMy1ehtTFbeDQ96ohmo9SLbdv/YBjSuz5tutf9voVhhzgv6QKON Zz52Fbx/QZmRP1i+nlyu8+DQhsA/DufnmWKSQpx2hlE= ) ; Key ID = 28574 fpki.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210925145208 20210918145208 36909 fpki.gov. UgRq5SXctYwjPyMn+YFdphkikg5rafVzuaFeYugp9DH+uHNmInILgDVXzQ4EzvJemmj0xPeN6BdX wwuQtml9n1ynKA48pHxlEc9+XpYAb+kEaPgqE+AcDnP9D2stLeLQ2GQlFkEOwB1GjwUpD9OAI5eV cbbsMGTVJVd2SHS7cJw4NnH/KtrELzqGnDs/+8Xog5h6uhzp/GaEDWCnFJFx3puSvjOB1hCx7Zsj Aj8pdvm1uKDk7RqVr+iEydv8taTs7l2X4Tw3PTtxXriV9li0Im+V+AdV6hvIRueZyLtJYoRLrBWU S+5lk8rbOU8JBqFc+CAqv8cA6HIgPLLRPKr8PA== ) fpki.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210925145208 20210918145208 53169 fpki.gov. fBqW/W/Jbx6eCXCC9XAHdXKMTFIL+ZbBrsvol5ksxTaIgbxrHeO10g04NLMj9UlPurz7zX41ct0h Wvp8SEjMSGgHPdi0y6LGCbxfhzB2ILJj6iUBrxxHNWGXaYaLuwFTdEFQgFFmRNfHL0AGWfH/e0Du 01T7Zb1yLnysN03zJ6gRgmZWUsY4GUqw9Qvr1Q2Fgr21gqW5baMZ5KXjEVj2/l5QTXjOw1Hwgsff 1xolEsV4Dwe7olwbdJmL1IMiQresOiEHiz73Z+If32/qw+RZqsdSQ4LbOld5/tIxkfMyMT1ScE2E J2QdlGvIv0igLSMqmYdrt1ThY/KwcMAUucShrA== ) fpki.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210925145208 20210918145208 20720 fpki.gov. p2jUSkY5gF4ZiLopDRSZDDbvnOJgKQV+ytwZX+Ck2hen/+CkTnB4soM6AqaOJO48yj7pcvZPjzaK ANcR6qTsX3eoNKs4JJrstrE468ofT0/sjeQp0us08wQ3xNzkgEqqB78ZumYYNgz0EyV01ZsD16Te r80+TXVTXZCeq0DKM9l6l4o8L7+E6HCcxdd7x2y7fJuOHMErHYRr+gNK2F18Q7diYQIN4xM+sW1l ilozlt2xfSA7DpiiF5mB4de6QXfvsiVMX+0Cu28MrEs4S0zpQYCAFuESOwNNdKj2QFJZNR6jQzNS nLspxIiMmvCkcdeDU5aClMsagKzgbXEJlA3lmw== ) fpki.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210925145208 20210918145208 28574 fpki.gov. HxK7dnbtuKegYD8KPKfhcUY5WLo6103qjjNfM8trLiVCArnQEG2TNG/iVwzyR6178VwctA1yBT1A bJyRK0YAxqnQ514183x9rxdpPpY/Q8CjVogfoJvcvZgB7QBNZzgtfEPwZiDXnc8kscHly1A4r7jh ZeEIshVSWUAmQikAE7X4DttRVyamktkOQGdIxjFV1FrRseD/wpDxw9dcngOXTWtbgNg6npyHsGEX Da+PxxtPQZ28/f0fztJSuFFXFHzIV+Kf/+kKboPW8mvXYwe6HNfNG7T54M0kSS30IV1IxVvof7kv lIYDj6gny9bjiKuIDs5fVvVRzDxUplgcnzzMyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for fpki.gov
	`fpki.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAcA9JISVf0o7Rt7YC7Tda1RGk8m2JiB9JANjbrh8BG+dAoQR0WdBEf2NVgU2h5fOGB5RZE2i 9I2P58kp75oWmCOk6t8WfrISTKpWS4Rm4Uzz2qXXIAbhD9Va5uGfEZ3zatZz0u2uAwrGU5yBGnXb F2cijkDKqWqoxfz4RKcpdHrMkezR7ewylu0qcbB9Xa53gLLtRGmmAKo89ckdq3Dk8dKmrXFtxAaA 6C6HM3Y/EC7AzxVCMqsHObW/3SA3ASj6aukNEotk9BX4O4PRH6yBjnR3e1an7gBCljix/td55EfC eF7zYjWmy3Z+jwtKIyrsYhoQqybdxHeetTQNqVDroP8= ) ; Key ID = 36909`
	`fpki.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAZa0tli3cfksD8pKd6NwpDKFB4bEiaamd/UjJnSiSlpAbuUrRyq3YLWIieetgu+Ekei7fwGk Mj1gtLad8dcngdxsZ3K927F+ZdP9Co+Zov9ZsqzWdSOhTrvLnf94OYT3tAlQntrDg0Gb5nY6Jk6A fxe6gXY24wHuf5z5H3dKjxEZ7K4p9jnGqLAVGtFaya63daXfAZKku16O7T+zK0H4WtBfa8U3jiud SAYmxmrY3Wsqmky+/MGxOKyXnV2/UFIFwunavyJ1owhFeCRx/LxpbOEI7Lc8Qx13F82vn/yH/MHE lH/b1wOnxzP7A0wcVCQUsQYoSYb1buI4dVsGHLll6G0= ) ; Key ID = 53169`
	`fpki.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAbp/xIGuyPfHZSYXowpiHeewWyfm8d83sd+GmEoG5tCys7H5brfg/ZFixIkxfg0LZ6HY6GUa 2q/hbJAIm2V78p+MwusCUKtLeJcxUhG3c0aFu5xuws17jnWlvg8fgYNCd2JfgfbA76k3JsCXC16c ZZ/d59Oc5zxfUIbgR+KMydLBLLEwzXsb9UstBn4iOabkpw4dlom7ZfwTAnmIe3wf/9+pdmxT3vJX xFZoKPsThqSBqoAS9wZZqiuvblDWN4ATYAslBZkgXuk6guflJEpDX8Z7fDxPjKf8CezZD+y97rnZ pK+x6nJB+lPQvtfRil9zZp85HpIx/QCwLMy5IeJ8BzE= ) ; Key ID = 20720`
	`fpki.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAadqRwG9qAOkFQptWl+TJ5unvPriPHbFPF9AAeN3KSkcWhwnxnGPyqIimUZpReMI9DYNud09 tTZanSpmzA7DlE4W+fjwI58Sntp2ookzHBTV4PnbU4GHlqTQGGywAlccqGRTmUtA3Y5RqpPFOoIx NcoWL3YC373uLrauXA8PaPCXuE5lexFbCXtPM7vNXHMUHIUwEVZU3N6kID4dMtDmPj/IMmTSpXcm 2Jbhug6Ps049YN0K6X3NvXb4qyMy1ehtTFbeDQ96ohmo9SLbdv/YBjSuz5tutf9voVhhzgv6QKON Zz52Fbx/QZmRP1i+nlyu8+DQhsA/DufnmWKSQpx2hlE= ) ; Key ID = 28574`
	DNSKEY=36909/SEP is now in the chain-of-trust
	DS=36909/SHA-1 verifies DNSKEY=36909/SEP
	DS=36909/SHA-256 verifies DNSKEY=36909/SEP
	DNSKEY=53169/SEP is now in the chain-of-trust
	DS=53169/SHA-256 verifies DNSKEY=53169/SEP
	DS=53169/SHA-1 verifies DNSKEY=53169/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`fpki.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210925145208 20210918145208 36909 fpki.gov. UgRq5SXctYwjPyMn+YFdphkikg5rafVzuaFeYugp9DH+uHNmInILgDVXzQ4EzvJemmj0xPeN6BdX wwuQtml9n1ynKA48pHxlEc9+XpYAb+kEaPgqE+AcDnP9D2stLeLQ2GQlFkEOwB1GjwUpD9OAI5eV cbbsMGTVJVd2SHS7cJw4NnH/KtrELzqGnDs/+8Xog5h6uhzp/GaEDWCnFJFx3puSvjOB1hCx7Zsj Aj8pdvm1uKDk7RqVr+iEydv8taTs7l2X4Tw3PTtxXriV9li0Im+V+AdV6hvIRueZyLtJYoRLrBWU S+5lk8rbOU8JBqFc+CAqv8cA6HIgPLLRPKr8PA== )`
	`fpki.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210925145208 20210918145208 53169 fpki.gov. fBqW/W/Jbx6eCXCC9XAHdXKMTFIL+ZbBrsvol5ksxTaIgbxrHeO10g04NLMj9UlPurz7zX41ct0h Wvp8SEjMSGgHPdi0y6LGCbxfhzB2ILJj6iUBrxxHNWGXaYaLuwFTdEFQgFFmRNfHL0AGWfH/e0Du 01T7Zb1yLnysN03zJ6gRgmZWUsY4GUqw9Qvr1Q2Fgr21gqW5baMZ5KXjEVj2/l5QTXjOw1Hwgsff 1xolEsV4Dwe7olwbdJmL1IMiQresOiEHiz73Z+If32/qw+RZqsdSQ4LbOld5/tIxkfMyMT1ScE2E J2QdlGvIv0igLSMqmYdrt1ThY/KwcMAUucShrA== )`
	`fpki.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210925145208 20210918145208 20720 fpki.gov. p2jUSkY5gF4ZiLopDRSZDDbvnOJgKQV+ytwZX+Ck2hen/+CkTnB4soM6AqaOJO48yj7pcvZPjzaK ANcR6qTsX3eoNKs4JJrstrE468ofT0/sjeQp0us08wQ3xNzkgEqqB78ZumYYNgz0EyV01ZsD16Te r80+TXVTXZCeq0DKM9l6l4o8L7+E6HCcxdd7x2y7fJuOHMErHYRr+gNK2F18Q7diYQIN4xM+sW1l ilozlt2xfSA7DpiiF5mB4de6QXfvsiVMX+0Cu28MrEs4S0zpQYCAFuESOwNNdKj2QFJZNR6jQzNS nLspxIiMmvCkcdeDU5aClMsagKzgbXEJlA3lmw== )`
	`fpki.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210925145208 20210918145208 28574 fpki.gov. HxK7dnbtuKegYD8KPKfhcUY5WLo6103qjjNfM8trLiVCArnQEG2TNG/iVwzyR6178VwctA1yBT1A bJyRK0YAxqnQ514183x9rxdpPpY/Q8CjVogfoJvcvZgB7QBNZzgtfEPwZiDXnc8kscHly1A4r7jh ZeEIshVSWUAmQikAE7X4DttRVyamktkOQGdIxjFV1FrRseD/wpDxw9dcngOXTWtbgNg6npyHsGEX Da+PxxtPQZ28/f0fztJSuFFXFHzIV+Kf/+kKboPW8mvXYwe6HNfNG7T54M0kSS30IV1IxVvof7kv lIYDj6gny9bjiKuIDs5fVvVRzDxUplgcnzzMyA== )`
	RRSIG=36909 and DNSKEY=36909/SEP verifies the DNSKEY RRset
	RRSIG=53169 and DNSKEY=53169/SEP verifies the DNSKEY RRset
	RRSIG=20720 and DNSKEY=20720 verifies the DNSKEY RRset
	RRSIG=28574 and DNSKEY=28574 verifies the DNSKEY RRset
	DNSKEY=20720 is now in the chain-of-trust
	DNSKEY=28574 is now in the chain-of-trust
	Query to dns1.fpki.gov for fpki.gov/A
	Received 1366 bytes from 199.167.92.100
	;; Response received from 199.167.92.100 (1366 octets) ;; HEADER SECTION ;; id = 25305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki.gov. 500 IN SOA ( dns2.fpki.gov. hostmaster.dns1.fpki.gov. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925020727 20210918020727 20720 fpki.gov. Pg2xQhguBtRAS9/uzUhas78TaWJnUhbbh5NvORKRIVepqldchRItmixrzGjfJBjKUlkF12FjfFes lsb5zkcwzOiHy7okvTvWBhw9T7AtbuJIhcqOSjLxOCDxKbFw+Di5l2H1h0oNUu/G3hslTg3D6z4n Y3uZif7xRQqvs1v/o0JDHKHs+neqxgu3/12BFgr83vXQ8Yf03yHu3osccpeT/ToAiZekGdEWeXbU hSou8ATEAe31Uic17DnTawArK+BHP/ePhNbzPtYk9Lc6U/hJMHyOTXe0C2WO9Q1C6M3druPcyNEE OaNo+1wbjbsliNA15RfiilNiGaWfRhtDhu5aoA== ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925145244 20210918145244 28574 fpki.gov. FU9ILK+ML/ZmsFZj269I1B2a6o2OMEFUI90RBimyWwbYSca0jWHB4t1BhYsaAKf3Obb7/VbPLepF 9gArZvRI/xiGEvqReid0V8NtUkem5B8Bww+HVvdVOke+oKrMvFEhUklBP+79pdAEAW4+X1cq7VAw Z4vSEX+3uO5qpZy4sg8k4Ayt5ftA5LjE0vW0xBLxONT5Wcsi69McHGZLkPRxnlixHpeNjikimmzO gNNRHKkxfcAMlaZTWP2sunJractX2J+TorlinQzZG+rNsEnEYMGF5nyER7/2m6vSjNW++8bAOrkq fYrvPFvX2qrfuyY3e+pouCpzO3iw7zQXB6ufjA== ) s3jtgfa524ce5jnbg4rg7n78qfnma7e5.fpki.gov. 3600 IN NSEC3 ( 1 0 1 e0c31f468166e882 s3jtgfa524ce5jnbg4rg7n78qfnma7e6 NS SOA RRSIG DNSKEY NSEC3PARAM ) s3jtgfa524ce5jnbg4rg7n78qfnma7e5.fpki.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20210928195633 20210921195633 20720 fpki.gov. PM3Dur1VyBQUrIyLHzrzoj6wY2/pc6aDBZnZgAqNNNaTy2AEm2xPOkIgSidM8bAIVa6ckWBjBFQJ A/6DdWXzDF0a+fWsl2DsRKzQz+O8c3f2YBMrSWGHJ2nWaZxboNodjbPOJYlnVatX2ucZgCX/YHBe hxgSUTdlyzY3iVFkM/HSP5hj48y/vJEF8GilEOF1pCXCv5hXLH4aA9/nGBWBBgjqYSMmfax3L/mR qc+SwuMf9ngAiTVkYtWeSd1qY0Sn0il6Q5dBh3LzBU/V0Xnjz7Tzo9vpIhs/fLcxdjpzCaz7lp6Y cLQ3Ed1iWl4uboIyo1NgBNRXf9PJQCA0UYessA== ) s3jtgfa524ce5jnbg4rg7n78qfnma7e5.fpki.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20210928195633 20210921195633 28574 fpki.gov. CL3qMTbY7mcX6/VfLXhdlWNw4+4XHDem0L9hgxz+Q8m6WtsQ05FtITI7gCIYlxvOrHEE1+EaGP/b sKPrazomUxJ9RDHzKNoCq2vADhH4tYLaFqamIK/30LkeJzG5SNHXgK+v+mte4+HOz7MbZrs0ctMb gp+m5CP8aodrqk+Kcey4Hqf80LFrq5v2N5fW69dokW2mYkOAc6oJfs8Iu9+xg1BEzTm4q4YWHKVw 1chHzoGpZTDLvDFFuoP2maa0r30MPyZ1wdf//iUAZkNltBLRKA3D7wVFfWVemrh8SOd7q1bsOHns 8qq9VUF1tg1DdB2lhGzUKgd8TT/s0uj7dP2hQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.fpki.gov is authoritative for fpki.gov
	Found RRSIG signed by fpki.gov zone
	Query to dns2.fpki.gov for fpki.gov/SOA
	Received 3762 bytes from 199.167.93.100
	;; Response received from 199.167.93.100 (3762 octets) ;; HEADER SECTION ;; id = 56567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN SOA ;; ANSWER SECTION (3 records) fpki.gov. 500 IN SOA ( dns2.fpki.gov. hostmaster.dns1.fpki.gov. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210929065244 20210922065244 20720 fpki.gov. enMdh4i5VF41xQbOC3V7F7JwP19rFDSvNjEa1sWlwpAfHjnrCHeV04LfeyN/zdpENBaWksg1SJ0M Qy7VEhZ2pqYxBCCcQOXQ+x8gMEkZSxweID0SRVRj59YFnXtnkBNOQP3LlQnAdiJru4O8vSgHBRVJ FO9vx3kVZjgMdJKI8UhNATS4/wm0AxRlpB3kUc0l4NHWotKiuXJe5aIUraOYm8hyz4ID90vUBQB6 ONqeAl35OTKJAmgxTWokYDr6SK6gCGAY8cLWurnfIzMdbNrUSJ2vlMNGAm2oZ3xAtdWqwTb389l9 baq78BgX17WsTvJv/RLT/NmqutTy4MDZwCIKJQ== ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925145216 20210918145216 28574 fpki.gov. ht4iPjSL+zl3uRdfEikxyRyXoB+j9EoqGm8hfcTJMITk/TQ9NbER4eIdqdpqz956znq8ySYDe/DV nsxd4pH+1loZHrkgRV3KYpQsGXKuhNJTQ+Pw4MPNHbp719p54fyjLuB/FoIlhpgtxZ9tTidkHM9C C/AhdGqeN7oXoIBJxXEFPVs7UeNEIvJKM0RyfnhKLG9O595g9Zgxgm8xHweLYCpD8p+dWT+5X25B xZcVTXFArvOoZYNyqFReDXSKD4Ah4SNK0Td/cJv3CfRzQTkK9LIDBTJ5aqoSxJss8sG0xXuEPz6C OImviYWHktAm/CXWlLA/1jGwpNQXaE+YPOnm1Q== ) ;; AUTHORITY SECTION (4 records) fpki.gov. 500 IN NS dns2.fpki.gov. fpki.gov. 500 IN NS dns1.fpki.gov. fpki.gov. 500 IN RRSIG ( NS 7 2 500 20210929065212 20210922065212 20720 fpki.gov. JUnvRBckIfue2fQXeoNh9ogONJhK4O/9gcpvC0evaAbcGINnfhfnF/SwdYpYEmhl9/iZRiXT5TI0 QEvNR6dximJa6Yk7WieVaXoGuKOwfOSWp6n9SjTgbazO5vfEZGJnPRtiBukLRu4KMaO9J1uc6sUd o5e9o8Hu3zOSXpaBfLGc8zPO34vJk0W/ko2K75Ret+PyRlfYT89Bq4Gjy3GQG+NQ/Aq1oDMtMTwF gmbcietpFxd3pU/fs8SSvlUOUgz/4z/bn1YG2PUpQZLaZ84SRL6lXYhfn2ivYkCHGyrLPnyoh+vv 81bxbSxmBcJoRcX5V3kl7Z3B+ptxMD6Up1vZQQ== ) fpki.gov. 500 IN RRSIG ( NS 7 2 500 20210925145206 20210918145206 28574 fpki.gov. LaeKLLQAczB5A8oJ+HKfOEM22+3GqsBKorBikvEfyzB8IMyBUrHFZiBKLlZ60bb4IqO5nglovZxK vHLb4rndYAZAff9MBuu4fbZsQ99L64rl48t1aGSh70Tkzrl8yASnKPZIg5ClSgBdFnnOEddb8rdV uW77+Sre90ieRgsuH6GY/wfXH+jw7MieG0Q5HUUx+mb5tfnq4N3wge1bOEb9vsSzbdFzNpKQ2Fd3 /hoEE7IZWBhcPlh8s+2aF1DIPcSwfOQW+5rDMGgMULArg9Jcw+T0F5TLmZ6GaTEpiCcdL3vNT6JN xg7I+E2m7xIXruIPr7YkvlnlXVrddz7e9ccPCA== ) ;; ADDITIONAL SECTION (13 records) dns1.fpki.gov. 500 IN A 199.167.92.100 dns1.fpki.gov. 500 IN RRSIG ( A 7 3 500 20210929065212 20210922065212 20720 fpki.gov. bnq8AnLJSF/7TotkAs+3ckA9pc3HoLi/oGYoiYfC+ldv0cJPEh70SQRwtIZqGXWicSWXenJGFEpe 7YIJCAoyNCxFGl5GrCLawPwHy5GF6H1D7j1LaPnYDPl9f9bD4FQt6csQonH5TKFxH3Ae2v8omKn1 mwNXA73vYIH7E7gHpPQNs1JNyH7S+RPMBm58jKDLVOLYibMjKlpoPEbqcB+ScgEJLpINInMNniYM z4WE7sEKGSPLZXw6bvctiGN0ejSiXEErS6TIGRJgXQpYtjNOJa7rCS9jGvQJ83oxyqK9zruexI94 8lBqqR2/Il3qsl6lYzbYvtSuvNHm5soX668K5A== ) dns1.fpki.gov. 500 IN RRSIG ( A 7 3 500 20210925145206 20210918145206 28574 fpki.gov. TmjZAy8G8nTNt2ZFPXb6SgEe77TMPUJQ8Anc9wBkH+K7kPsfNN8cdjTI4M0crCHXmSLX+JCtlsMV ToQwHs/I7/T720gXWvdwVZ+UhAk4vcKZo8vGklfHQRQUJgLCWfkuWTaGIL+fpecBzBTLj0pWs+Mb iF+lWvF34QfbEe2+hX6/FzSMF6mjBlmV4wE67k5fE1OWdaboAwkKJpvEKYL1S0tKG44Qe5K8LVpu nZU3GqzuTxUOPY2ijk+0uKE8wqwwE3pZDTIUx9YZmom38ZTExcrYdhNyj3QYLNRAMTFLVmp+fMmh Rd5JSP2/gqC3njcKmERj4+ieZ8WjiFTIvxlILg== ) dns2.fpki.gov. 500 IN A 199.167.93.100 dns2.fpki.gov. 500 IN RRSIG ( A 7 3 500 20210929065212 20210922065212 20720 fpki.gov. oGZ8qj2WTEc5LleBlEsg4KlQZHi1KzoxS3BcSFxFL/sRezUzm6+ok/HM9l5rrhsGHvc4If9LdrUH TUkuH53F1PXUVTv65069/qkSApOoq6GF4qrxCMuwtgE94sXgaN9777esJCpd0zE6mYD4TWuzy8OZ p3yYlfRjd+Z0QCJ4XvcZETNS+7TD+FLNRignDqHhMvYkORHC3D+eOjnuSQZmaYpNsvaXGfJwaYud QuUy+U23/YGRiRcdOOrL2Qss9AVApqPTIm1rbAyPEH8W6Qgc0LROBDy6EC1ceUxWx7ONq+wQswvA BTDyzKJp4NKmLyqDnEJfJOPf+nY02bJN08JKAg== ) dns2.fpki.gov. 500 IN RRSIG ( A 7 3 500 20210925145206 20210918145206 28574 fpki.gov. YcAtdQWVAoBwnLXqH0JSrXjIxPATzRuPa7lOldW9DT3DAlg/J8df2ahKPKCC2SYzuLXR3eaYfiKW oNPJ9y3cLZscyXPsmG6EBnu7SEvlOXdv8duJZJ7YzQmNIqSANSTx5bMzk49OIv2d+1J6JcNQ7UUf EBfGJFcPf5ayGBd3toGxNayZHrxQUW2vMn21XzzF/xUAC+Q9hBlVVjd9LTdkAfBiHj3aOiOUf9t9 m/1yBGLNf7PKgNRbU/xpksdlKRNMCA1YabH+Yi/rHyvc/OIU+wx234oAqPnk/8Gq9lCBKOQ9+glQ elURIm8114KyVa82t4NxM3TULorZAPOs5DVI3A== ) dns1.fpki.gov. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.fpki.gov. 500 IN RRSIG ( AAAA 7 3 500 20210929065212 20210922065212 20720 fpki.gov. kzMyWe3zwL4MPIhAwLM09NuI0GKbRae3EihUzbkhFb/JA/2HfrmE/nlgoPpDkS8LvTlpKsUJsxiz eSGBBj2ExIsMHQ2KnkJ9LrggY8Qu1b1boYoxDbRbQMw2Vsz5JxORxb/1oBqOjvzwT1MnaTKm/9Fn 6EVwyPG5BYcRN4+vH84cVO11eDEaPtiWILj/dThpzJyjESQCyRLPJNZ6xioXF06IjXO1C7u+Cpu3 ujELlXzZm2UKLiwPymZVw0PakmSbyO2/68qOkua9QpLgVhQTUCBDFT9k9VLv2QIOEiB06LMbghwo nJa2JfJA51DzidHLp0wwAKtHgNy8WPPvd8gJbQ== ) dns1.fpki.gov. 500 IN RRSIG ( AAAA 7 3 500 20210925145206 20210918145206 28574 fpki.gov. NoZDUsxFMXJxkk4O5vrDu6AEgCzzJOvsxnmyhm1Qhx1bxQ4hido2dzuViKdyUfqvkj4RR/LB6pjD x/ljowm/aQXso42bZfzAWHekWbY/d87igkdAXLLh0qZ+kz4/5Q85Md0QRgyeqhnK5rPkyj8G5vPV cwhU0AAhAlX9zya2G/GJ8IMHkw39JkJmCgFC2lDAN0HvHUNDEdELuhXRknaJoPmzSAEpv71IjC2E fmUKk79mj/L0lFK81uST6ESMD8rCLdXlL/ppXffDPhwgfJUy7P580MQtiLT55crvtTYh1RfbePWp fJEsR/xw9mdPHgeN2mP2/AHIh5fKJUYvAlX0VA== ) dns2.fpki.gov. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.fpki.gov. 500 IN RRSIG ( AAAA 7 3 500 20210929065212 20210922065212 20720 fpki.gov. RXEdCiB4DVw8sWARMeieVmI5TVf40Xv1C4sumzLm5fUCBr9KWkxaIIfrucDQnvfaTpAN7tnjh/ba pBHeIr7DVtvWS0wLNfLRpKwmcbQidV2mbsF5zxRhU0CpBdRtMlI45e4kIblDVQJ67iuMnORmgOuD F+nq2yGdBhLp0z7wXDsEXltzsGF4oY0Iyv6Wph+ti4dYIMrfvi4qB+IfdWfF8vvJri2ZM5L4wY0x McACG+JbwehxooUekqZn4zMUoXSMAkk23fNd72RAFAmtd0/ttAzZYYkBMetk6dUrxsaZUhGrD9/5 f7ULwlh/CmUQdPiZ1XA9OFANvtzhOl4UAfc99g== ) dns2.fpki.gov. 500 IN RRSIG ( AAAA 7 3 500 20210925145206 20210918145206 28574 fpki.gov. L3oKpak1eg04CjrdF30Hg7jyTyV6QMC9d2VepHqB601aRIYiuLu8/q4hlW3W1E8O3M2y5M8ANdwo +8QbzKTFl0fJ9zSYF+QwfEdwYZ89jJT+hCiwpgxkhqYTUvWTOS/7cCuno3b1+SsJnXxfDMKSwEdr RnkqTmeS7LYn+VX3FSjZxS/YQYmzyqUYuUGWJ6QxNBfjqjjL326950tm+T+If++MjjwcGXgzePEG yznLKu6sL4tDSIQwDOO7jbk2UXFUfJv9pAw1tle7zXDwLY7d1UJF1vA4YkYp7VAwK9r5P5DVn7AU 3I4OVWN0L0jE0Zs6XhmfikLcQLoGY80zo3cRDA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.fpki.gov for fpki.gov/A
	Received 1366 bytes from 199.167.92.100
	;; Response received from 199.167.92.100 (1366 octets) ;; HEADER SECTION ;; id = 8935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki.gov. 500 IN SOA ( dns2.fpki.gov. hostmaster.dns1.fpki.gov. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925020727 20210918020727 20720 fpki.gov. Pg2xQhguBtRAS9/uzUhas78TaWJnUhbbh5NvORKRIVepqldchRItmixrzGjfJBjKUlkF12FjfFes lsb5zkcwzOiHy7okvTvWBhw9T7AtbuJIhcqOSjLxOCDxKbFw+Di5l2H1h0oNUu/G3hslTg3D6z4n Y3uZif7xRQqvs1v/o0JDHKHs+neqxgu3/12BFgr83vXQ8Yf03yHu3osccpeT/ToAiZekGdEWeXbU hSou8ATEAe31Uic17DnTawArK+BHP/ePhNbzPtYk9Lc6U/hJMHyOTXe0C2WO9Q1C6M3druPcyNEE OaNo+1wbjbsliNA15RfiilNiGaWfRhtDhu5aoA== ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925145244 20210918145244 28574 fpki.gov. FU9ILK+ML/ZmsFZj269I1B2a6o2OMEFUI90RBimyWwbYSca0jWHB4t1BhYsaAKf3Obb7/VbPLepF 9gArZvRI/xiGEvqReid0V8NtUkem5B8Bww+HVvdVOke+oKrMvFEhUklBP+79pdAEAW4+X1cq7VAw Z4vSEX+3uO5qpZy4sg8k4Ayt5ftA5LjE0vW0xBLxONT5Wcsi69McHGZLkPRxnlixHpeNjikimmzO gNNRHKkxfcAMlaZTWP2sunJractX2J+TorlinQzZG+rNsEnEYMGF5nyER7/2m6vSjNW++8bAOrkq fYrvPFvX2qrfuyY3e+pouCpzO3iw7zQXB6ufjA== ) s3jtgfa524ce5jnbg4rg7n78qfnma7e5.fpki.gov. 3600 IN NSEC3 ( 1 0 1 e0c31f468166e882 s3jtgfa524ce5jnbg4rg7n78qfnma7e6 NS SOA RRSIG DNSKEY NSEC3PARAM ) s3jtgfa524ce5jnbg4rg7n78qfnma7e5.fpki.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20210928195633 20210921195633 20720 fpki.gov. PM3Dur1VyBQUrIyLHzrzoj6wY2/pc6aDBZnZgAqNNNaTy2AEm2xPOkIgSidM8bAIVa6ckWBjBFQJ A/6DdWXzDF0a+fWsl2DsRKzQz+O8c3f2YBMrSWGHJ2nWaZxboNodjbPOJYlnVatX2ucZgCX/YHBe hxgSUTdlyzY3iVFkM/HSP5hj48y/vJEF8GilEOF1pCXCv5hXLH4aA9/nGBWBBgjqYSMmfax3L/mR qc+SwuMf9ngAiTVkYtWeSd1qY0Sn0il6Q5dBh3LzBU/V0Xnjz7Tzo9vpIhs/fLcxdjpzCaz7lp6Y cLQ3Ed1iWl4uboIyo1NgBNRXf9PJQCA0UYessA== ) s3jtgfa524ce5jnbg4rg7n78qfnma7e5.fpki.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20210928195633 20210921195633 28574 fpki.gov. CL3qMTbY7mcX6/VfLXhdlWNw4+4XHDem0L9hgxz+Q8m6WtsQ05FtITI7gCIYlxvOrHEE1+EaGP/b sKPrazomUxJ9RDHzKNoCq2vADhH4tYLaFqamIK/30LkeJzG5SNHXgK+v+mte4+HOz7MbZrs0ctMb gp+m5CP8aodrqk+Kcey4Hqf80LFrq5v2N5fW69dokW2mYkOAc6oJfs8Iu9+xg1BEzTm4q4YWHKVw 1chHzoGpZTDLvDFFuoP2maa0r30MPyZ1wdf//iUAZkNltBLRKA3D7wVFfWVemrh8SOd7q1bsOHns 8qq9VUF1tg1DdB2lhGzUKgd8TT/s0uj7dP2hQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925020727 20210918020727 20720 fpki.gov. Pg2xQhguBtRAS9/uzUhas78TaWJnUhbbh5NvORKRIVepqldchRItmixrzGjfJBjKUlkF12FjfFes lsb5zkcwzOiHy7okvTvWBhw9T7AtbuJIhcqOSjLxOCDxKbFw+Di5l2H1h0oNUu/G3hslTg3D6z4n Y3uZif7xRQqvs1v/o0JDHKHs+neqxgu3/12BFgr83vXQ8Yf03yHu3osccpeT/ToAiZekGdEWeXbU hSou8ATEAe31Uic17DnTawArK+BHP/ePhNbzPtYk9Lc6U/hJMHyOTXe0C2WO9Q1C6M3druPcyNEE OaNo+1wbjbsliNA15RfiilNiGaWfRhtDhu5aoA== )`
	`fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925145244 20210918145244 28574 fpki.gov. FU9ILK+ML/ZmsFZj269I1B2a6o2OMEFUI90RBimyWwbYSca0jWHB4t1BhYsaAKf3Obb7/VbPLepF 9gArZvRI/xiGEvqReid0V8NtUkem5B8Bww+HVvdVOke+oKrMvFEhUklBP+79pdAEAW4+X1cq7VAw Z4vSEX+3uO5qpZy4sg8k4Ayt5ftA5LjE0vW0xBLxONT5Wcsi69McHGZLkPRxnlixHpeNjikimmzO gNNRHKkxfcAMlaZTWP2sunJractX2J+TorlinQzZG+rNsEnEYMGF5nyER7/2m6vSjNW++8bAOrkq fYrvPFvX2qrfuyY3e+pouCpzO3iw7zQXB6ufjA== )`
	RRSIG=20720 and DNSKEY=20720 verifies the SOA RRset
	RRSIG=28574 and DNSKEY=28574 verifies the SOA RRset

fpki.gov

	Query to dns2.fpki.gov for fpki.gov/A
	Received 1366 bytes from 199.167.93.100
	;; Response received from 199.167.93.100 (1366 octets) ;; HEADER SECTION ;; id = 51414 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki.gov. 500 IN SOA ( dns2.fpki.gov. hostmaster.dns1.fpki.gov. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210929065244 20210922065244 20720 fpki.gov. enMdh4i5VF41xQbOC3V7F7JwP19rFDSvNjEa1sWlwpAfHjnrCHeV04LfeyN/zdpENBaWksg1SJ0M Qy7VEhZ2pqYxBCCcQOXQ+x8gMEkZSxweID0SRVRj59YFnXtnkBNOQP3LlQnAdiJru4O8vSgHBRVJ FO9vx3kVZjgMdJKI8UhNATS4/wm0AxRlpB3kUc0l4NHWotKiuXJe5aIUraOYm8hyz4ID90vUBQB6 ONqeAl35OTKJAmgxTWokYDr6SK6gCGAY8cLWurnfIzMdbNrUSJ2vlMNGAm2oZ3xAtdWqwTb389l9 baq78BgX17WsTvJv/RLT/NmqutTy4MDZwCIKJQ== ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925145216 20210918145216 28574 fpki.gov. ht4iPjSL+zl3uRdfEikxyRyXoB+j9EoqGm8hfcTJMITk/TQ9NbER4eIdqdpqz956znq8ySYDe/DV nsxd4pH+1loZHrkgRV3KYpQsGXKuhNJTQ+Pw4MPNHbp719p54fyjLuB/FoIlhpgtxZ9tTidkHM9C C/AhdGqeN7oXoIBJxXEFPVs7UeNEIvJKM0RyfnhKLG9O595g9Zgxgm8xHweLYCpD8p+dWT+5X25B xZcVTXFArvOoZYNyqFReDXSKD4Ah4SNK0Td/cJv3CfRzQTkK9LIDBTJ5aqoSxJss8sG0xXuEPz6C OImviYWHktAm/CXWlLA/1jGwpNQXaE+YPOnm1Q== ) as4rua9l678s19vfibebmjllhval3c7e.fpki.gov. 3600 IN NSEC3 ( 1 0 1 c12015d2d1ffbe78 as4rua9l678s19vfibebmjllhval3c7f NS SOA RRSIG DNSKEY NSEC3PARAM ) as4rua9l678s19vfibebmjllhval3c7e.fpki.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20210928231752 20210921231752 20720 fpki.gov. Ef7hWFTnuTZXp9NN+BDkkO9piELyta2y6qE5B+6C2fKXPUlSR50DW/Jmb6cNOJgT20fXAFgxQRYf rUrWRNnNnAr00065T4ohNq3nmM3BU+fMcK/mtTmUUXdHDcBoJ1hVZcSSsTr32a4IYecR5g8iLWZu xohBbjgPGgi0pN2F+AyKFHWOY9kDMscaS4UwPBOmcXOMEwNmTC/nld8R/DWV3pNwSUBUM7Az//BT cv+BlX/Qx3lwllb96deaNlN/cyedOjopk98BiprfpjUL+mM9BG9qYBS0AMpZzvlx0XMFjc4dCSar 2t2k/wrL+2tBcNz94uI4HI6wMOQ+130pDxjbGw== ) as4rua9l678s19vfibebmjllhval3c7e.fpki.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20210928231752 20210921231752 28574 fpki.gov. IpXo92fqnpo0BNw4PYS78cqH524PwHTzBvr/tHMZG/tUDTFaMNMGQ2qM7ySANB7Z3H5Gz86ZVGnF MEfR5zkp/vH/KGS0rsQFDYFL4Oic/SRMy3zDjBs16oR3meF1Cu4qZHRvBuRX6HVeWRf8PoadPbNI QVmfAJYtFb8n1gnmZTQ+EKg1nBb+28x9WnqHDOr3R9pDY8H3xvMh92SyZ0qA+/8ohEoamcShuZzT t6vJnBQ5BX1L2Uzg/vNixON60eHAIo40JiUm3pehECYZzg8Lu+2svdG9yRu8qF8/5Zf5ktVaVHKO leNujv7unrw1lJawaKeG/pNfs0B2jl8E1EZfLA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.fpki.gov is authoritative for fpki.gov
	Found RRSIG signed by fpki.gov zone
	Query to dns2.fpki.gov for fpki.gov/A
	Received 1366 bytes from 199.167.93.100
	;; Response received from 199.167.93.100 (1366 octets) ;; HEADER SECTION ;; id = 38105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fpki.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fpki.gov. 500 IN SOA ( dns2.fpki.gov. hostmaster.dns1.fpki.gov. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210929065244 20210922065244 20720 fpki.gov. enMdh4i5VF41xQbOC3V7F7JwP19rFDSvNjEa1sWlwpAfHjnrCHeV04LfeyN/zdpENBaWksg1SJ0M Qy7VEhZ2pqYxBCCcQOXQ+x8gMEkZSxweID0SRVRj59YFnXtnkBNOQP3LlQnAdiJru4O8vSgHBRVJ FO9vx3kVZjgMdJKI8UhNATS4/wm0AxRlpB3kUc0l4NHWotKiuXJe5aIUraOYm8hyz4ID90vUBQB6 ONqeAl35OTKJAmgxTWokYDr6SK6gCGAY8cLWurnfIzMdbNrUSJ2vlMNGAm2oZ3xAtdWqwTb389l9 baq78BgX17WsTvJv/RLT/NmqutTy4MDZwCIKJQ== ) fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925145216 20210918145216 28574 fpki.gov. ht4iPjSL+zl3uRdfEikxyRyXoB+j9EoqGm8hfcTJMITk/TQ9NbER4eIdqdpqz956znq8ySYDe/DV nsxd4pH+1loZHrkgRV3KYpQsGXKuhNJTQ+Pw4MPNHbp719p54fyjLuB/FoIlhpgtxZ9tTidkHM9C C/AhdGqeN7oXoIBJxXEFPVs7UeNEIvJKM0RyfnhKLG9O595g9Zgxgm8xHweLYCpD8p+dWT+5X25B xZcVTXFArvOoZYNyqFReDXSKD4Ah4SNK0Td/cJv3CfRzQTkK9LIDBTJ5aqoSxJss8sG0xXuEPz6C OImviYWHktAm/CXWlLA/1jGwpNQXaE+YPOnm1Q== ) as4rua9l678s19vfibebmjllhval3c7e.fpki.gov. 3600 IN NSEC3 ( 1 0 1 c12015d2d1ffbe78 as4rua9l678s19vfibebmjllhval3c7f NS SOA RRSIG DNSKEY NSEC3PARAM ) as4rua9l678s19vfibebmjllhval3c7e.fpki.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20210928231752 20210921231752 20720 fpki.gov. Ef7hWFTnuTZXp9NN+BDkkO9piELyta2y6qE5B+6C2fKXPUlSR50DW/Jmb6cNOJgT20fXAFgxQRYf rUrWRNnNnAr00065T4ohNq3nmM3BU+fMcK/mtTmUUXdHDcBoJ1hVZcSSsTr32a4IYecR5g8iLWZu xohBbjgPGgi0pN2F+AyKFHWOY9kDMscaS4UwPBOmcXOMEwNmTC/nld8R/DWV3pNwSUBUM7Az//BT cv+BlX/Qx3lwllb96deaNlN/cyedOjopk98BiprfpjUL+mM9BG9qYBS0AMpZzvlx0XMFjc4dCSar 2t2k/wrL+2tBcNz94uI4HI6wMOQ+130pDxjbGw== ) as4rua9l678s19vfibebmjllhval3c7e.fpki.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20210928231752 20210921231752 28574 fpki.gov. IpXo92fqnpo0BNw4PYS78cqH524PwHTzBvr/tHMZG/tUDTFaMNMGQ2qM7ySANB7Z3H5Gz86ZVGnF MEfR5zkp/vH/KGS0rsQFDYFL4Oic/SRMy3zDjBs16oR3meF1Cu4qZHRvBuRX6HVeWRf8PoadPbNI QVmfAJYtFb8n1gnmZTQ+EKg1nBb+28x9WnqHDOr3R9pDY8H3xvMh92SyZ0qA+/8ohEoamcShuZzT t6vJnBQ5BX1L2Uzg/vNixON60eHAIo40JiUm3pehECYZzg8Lu+2svdG9yRu8qF8/5Zf5ktVaVHKO leNujv7unrw1lJawaKeG/pNfs0B2jl8E1EZfLA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210929065244 20210922065244 20720 fpki.gov. enMdh4i5VF41xQbOC3V7F7JwP19rFDSvNjEa1sWlwpAfHjnrCHeV04LfeyN/zdpENBaWksg1SJ0M Qy7VEhZ2pqYxBCCcQOXQ+x8gMEkZSxweID0SRVRj59YFnXtnkBNOQP3LlQnAdiJru4O8vSgHBRVJ FO9vx3kVZjgMdJKI8UhNATS4/wm0AxRlpB3kUc0l4NHWotKiuXJe5aIUraOYm8hyz4ID90vUBQB6 ONqeAl35OTKJAmgxTWokYDr6SK6gCGAY8cLWurnfIzMdbNrUSJ2vlMNGAm2oZ3xAtdWqwTb389l9 baq78BgX17WsTvJv/RLT/NmqutTy4MDZwCIKJQ== )`
	`fpki.gov. 500 IN RRSIG ( SOA 7 2 500 20210925145216 20210918145216 28574 fpki.gov. ht4iPjSL+zl3uRdfEikxyRyXoB+j9EoqGm8hfcTJMITk/TQ9NbER4eIdqdpqz956znq8ySYDe/DV nsxd4pH+1loZHrkgRV3KYpQsGXKuhNJTQ+Pw4MPNHbp719p54fyjLuB/FoIlhpgtxZ9tTidkHM9C C/AhdGqeN7oXoIBJxXEFPVs7UeNEIvJKM0RyfnhKLG9O595g9Zgxgm8xHweLYCpD8p+dWT+5X25B xZcVTXFArvOoZYNyqFReDXSKD4Ah4SNK0Td/cJv3CfRzQTkK9LIDBTJ5aqoSxJss8sG0xXuEPz6C OImviYWHktAm/CXWlLA/1jGwpNQXaE+YPOnm1Q== )`
	RRSIG=20720 and DNSKEY=20720 verifies the SOA RRset
	RRSIG=28574 and DNSKEY=28574 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fpki.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: