DNSSEC Debugger - fvap.gov

Domain Name:

Time: 2024-09-11 02:59:10 UTC

Analyzing DNSSEC problems for fvap.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 53673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to d.root-servers.net for fvap.gov/A
	Received 615 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 615 octets ;; HEADER SECTION ;; id = 46770 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for gov/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 610 octets ;; HEADER SECTION ;; id = 1859 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to c.root-servers.net for gov/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 45353 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . Eo3cgZOzTZY/itsJP6u+ScC+Gjipd4PkdoT1NeEWGHgDpFM4W94Un2sDZigHePKC62NorUA2q8yJ oe3nHdXT/J7l1H9e/aQ8LR1ijA8SEFXrZNl0dQzH7GZ2nFN6CK3ggepJdzzbiDdR1R8937+9X+TB wFCw8dtDmaJ2yE9ULxfEiSNABLqp0U1hy9FpFXzlQLOPFGhmExt1/uz7k1EeL8TMEff3D1KTWMn9 rSGebjiO9/WoUljvS04x6RsecfCigTjKFLTwhMz19Sy57aJ8bESL426waKYeQFryEArSI4m5ERoT /NcRoCOg/oIGKEXETP04IDCCICPt+K688kUZsg== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 25749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241106110532 20240906110532 2536 gov. 3ItZq78WJ+YaUtZumcjIK7u6ZY86wZH+NNkPI3xuJZE0mUGAPbVtzYlp3JKf8u9Icd/MEqHD9F8V aEILjah2qQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241106110532 20240906110532 2536 gov. 3ItZq78WJ+YaUtZumcjIK7u6ZY86wZH+NNkPI3xuJZE0mUGAPbVtzYlp3JKf8u9Icd/MEqHD9F8V aEILjah2qQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for fvap.gov/A
	Received 316 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 316 octets ;; HEADER SECTION ;; id = 4608 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fvap.gov. 10800 IN NS a1-124.akam.net. fvap.gov. 10800 IN NS a10-67.akam.net. fvap.gov. 10800 IN NS a11-64.akam.net. fvap.gov. 10800 IN NS a18-65.akam.net. fvap.gov. 10800 IN NS a5-66.akam.net. fvap.gov. 10800 IN NS a6-67.akam.net. fvap.gov. 3600 IN DS ( 41088 10 2 ff76608519fa96783e024e88bad7b69c7524ef1c87f70739c2ff664a1b8c50b8 ) fvap.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912035911 20240910015911 35496 gov. i+7bKH1l5UxFN1OHWZjOFpDuduCtvbce/fiDQPiei74VVrBVle8Zk7pBJRK5O5LQZwUxA7Lj5bEN Gu6QnVXMNg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for fvap.gov/DNSKEY
	Received 316 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 316 octets ;; HEADER SECTION ;; id = 27303 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fvap.gov. 10800 IN NS a1-124.akam.net. fvap.gov. 10800 IN NS a10-67.akam.net. fvap.gov. 10800 IN NS a11-64.akam.net. fvap.gov. 10800 IN NS a18-65.akam.net. fvap.gov. 10800 IN NS a5-66.akam.net. fvap.gov. 10800 IN NS a6-67.akam.net. fvap.gov. 3600 IN DS ( 41088 10 2 ff76608519fa96783e024e88bad7b69c7524ef1c87f70739c2ff664a1b8c50b8 ) fvap.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912035911 20240910015911 35496 gov. XHQdw9A1uV5s0basnUq/B/0XaYW/+4tYd6WV1lcFAo2+T6NjjHGe2DPHb+YnFFrzafoplGmHt2iv bAgEHYWEEQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone fvap.gov

fvap.gov

	Checking DS between gov and fvap.gov
	Query to d.ns.gov for fvap.gov/DS
	Received 184 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 184 octets ;; HEADER SECTION ;; id = 29774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN DS ;; ANSWER SECTION (2 records) fvap.gov. 3600 IN DS ( 41088 10 2 ff76608519fa96783e024e88bad7b69c7524ef1c87f70739c2ff664a1b8c50b8 ) fvap.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912035911 20240910015911 35496 gov. EP0Tf6u90a1yGCeSgXijOvbx1yRWWNd7axWmoK766rGjd8OSb4XMQcm8LcM5h5tVgyh0yDYKXDu/ 3XLIafnuPw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fvap.gov in the gov zone
	DS=41088/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`fvap.gov. 3600 IN RRSIG ( DS 13 2 3600 20240912035911 20240910015911 35496 gov. EP0Tf6u90a1yGCeSgXijOvbx1yRWWNd7axWmoK766rGjd8OSb4XMQcm8LcM5h5tVgyh0yDYKXDu/ 3XLIafnuPw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=41088/SHA-256 is now in the chain-of-trust
	`fvap.gov. 3600 IN DS ( 41088 10 2 ff76608519fa96783e024e88bad7b69c7524ef1c87f70739c2ff664a1b8c50b8 )`
	Query to a5-66.akam.net for fvap.gov/DNSKEY
	Received 1477 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 1477 octets ;; HEADER SECTION ;; id = 20103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN DNSKEY ;; ANSWER SECTION (6 records) fvap.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAciIanwJKbZiCqDFv9A3t6RuTFnaMBRFn5F3WLt58c9lFlK8M5do2uuIcEkdopoX11Iw5yn4 Qc7mJUJu2XMj4SGzKW5t9iDqmvyYGXcwr/VTttKw7DMw9FECTuma9sTTELEIFfa1+tlFaKMfCof2 B3soxLma91IunpMlAKLwcPrOHcB6hj6uwcUhoKgXI622aoMLtc/4BuSHFaWeKLocK9xXH8+/0nuK Q2jDUSG7l8bfpnZSe77jl3sPM3/irrCvHSGGXNP4MzfkBUfmM+peP/CLDJh7KgakDX2eq/Fl8u8O o9OpqQ4wd6d6bXxHCcy9tZF/92qgUk9+5SC247ESP2s= ) ; Key ID = 43062 fvap.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAdrOwrv46vQolizEzsT8/U0BL9l8kKhdGVncN7gO+ZCx6VIo2jU7z2XDyU6VNUTKp5D8MXLv VrbAuaOOgenK70jKerP/PRER/pcfuT/hutLGmz/ph9p3vGnEbmJOoBxjdskz2J2DRLWOY5EAe43R FYwaZdWXVHC6l3rZ8evWU5JLupyRKgOWTR9rSLw6heZy0NqD6KaVd0261xY8spuhv/x1YGKAkxqg 0JPPJMrRCG4RV2pvVCdIBBvMYCRdWvN1dG/vEImPHSmlZw7SWr/WpJDk+zhgZXND9Rx0GCvEshEf EakWlTHsDJy/K3bKYbiFkehfZBm9d4kKq9DFg9w74BU= ) ; Key ID = 41088 fvap.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAcVAN5cBu0IfAPY7X0nm7teQUlWqs4liKH6CXzkOqEvKbJEADZtuffyB4G9CwxID/cCWo9W1 bEy7cFTPazoBLSakJb+21xk2ykkKUtWV1bLthb4xUbdtZ6svWzQyEAvSFcCjY4dNHQmpUYvKzHPD Zy793wBAqSJetgFOqjBEXY+5 ) ; Key ID = 42603 fvap.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAbvC2/NBNtLacEFpXqKhYPC9SgeOEPQLgI33zdvpzUA2ggAHS8RcVeHME3TZ5y6VJaObsMQr T07K+FdvLnjjJiLfU46K14KlQMx8nOIOCxfo0ub9cPJrw4M/4mwW6PaT3DcHEEclINIblUB8FMyO 7bl92aWxxjT3YbLEOmA0x3Sl ) ; Key ID = 55262 fvap.gov. 7200 IN RRSIG ( DNSKEY 10 2 7200 20240914021111 20240911011111 41088 fvap.gov. QX2MxloiiXuikO9qchQPJjoZr6vUPVrCU+jhCv692DkTzn23B/nJdrrXg823MjRkoeB4oxAunpHs VhGB737LdXPvjPO4KLkZbD72xPhS+X9lPF6Oe21awJD3Qx8ixZ16ALC1x1vsxrtz37P06VC24Xz7 eK4zms6VJBN5gZUYFHO7hP7Q4xvvBbxJ/gqfnbqxHp4Rx1QiZtdXlo3NVZ7Kc9w3jPAvNaXAesBM 677PKu3x/yAqtmVzvMyuHEvmIWXUIABGA1fSJ/7uhlLL0exUsYM0jMgmovdF9OoJBzOr7Xiu9P4C zDSk/3uIyack8w28Z4nI3hNVPFXcdulzZqsdlw== ) fvap.gov. 7200 IN RRSIG ( DNSKEY 10 2 7200 20240914021111 20240911011111 43062 fvap.gov. ZGfM7lRtlvUY/umcBU4UtLVIZou+xwLN1sNR0ZITyDDDvsnBBYMMrq0CKN09MQk/NlkNJ2MwEoTm Q+4lbM6UwNgPwyARXWl311UQFrXrg/XMzZcn+Yda83OSXoFNzSPMxLo7RY53fiaDeuBY8HjfJJyK mgC+VsimSkWwNxkTuOplFKy176vc/ZrHJKUVbx2JtYik1J7HoOub1YKugZnE+WvfxyRlvQMjs6Gu r1EsUTXB+XcBtNH/HXd6iiSn4B4m3C8eZIv57aTA0gY5nu+w8qSo6H4t/AvPRqNIVn0NMpsA/8sE VuPvHM1AWReebFHJcGR1smmtO1P18PgcZ+oYgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for fvap.gov
	`fvap.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAciIanwJKbZiCqDFv9A3t6RuTFnaMBRFn5F3WLt58c9lFlK8M5do2uuIcEkdopoX11Iw5yn4 Qc7mJUJu2XMj4SGzKW5t9iDqmvyYGXcwr/VTttKw7DMw9FECTuma9sTTELEIFfa1+tlFaKMfCof2 B3soxLma91IunpMlAKLwcPrOHcB6hj6uwcUhoKgXI622aoMLtc/4BuSHFaWeKLocK9xXH8+/0nuK Q2jDUSG7l8bfpnZSe77jl3sPM3/irrCvHSGGXNP4MzfkBUfmM+peP/CLDJh7KgakDX2eq/Fl8u8O o9OpqQ4wd6d6bXxHCcy9tZF/92qgUk9+5SC247ESP2s= ) ; Key ID = 43062`
	`fvap.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAdrOwrv46vQolizEzsT8/U0BL9l8kKhdGVncN7gO+ZCx6VIo2jU7z2XDyU6VNUTKp5D8MXLv VrbAuaOOgenK70jKerP/PRER/pcfuT/hutLGmz/ph9p3vGnEbmJOoBxjdskz2J2DRLWOY5EAe43R FYwaZdWXVHC6l3rZ8evWU5JLupyRKgOWTR9rSLw6heZy0NqD6KaVd0261xY8spuhv/x1YGKAkxqg 0JPPJMrRCG4RV2pvVCdIBBvMYCRdWvN1dG/vEImPHSmlZw7SWr/WpJDk+zhgZXND9Rx0GCvEshEf EakWlTHsDJy/K3bKYbiFkehfZBm9d4kKq9DFg9w74BU= ) ; Key ID = 41088`
	`fvap.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAcVAN5cBu0IfAPY7X0nm7teQUlWqs4liKH6CXzkOqEvKbJEADZtuffyB4G9CwxID/cCWo9W1 bEy7cFTPazoBLSakJb+21xk2ykkKUtWV1bLthb4xUbdtZ6svWzQyEAvSFcCjY4dNHQmpUYvKzHPD Zy793wBAqSJetgFOqjBEXY+5 ) ; Key ID = 42603`
	`fvap.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAbvC2/NBNtLacEFpXqKhYPC9SgeOEPQLgI33zdvpzUA2ggAHS8RcVeHME3TZ5y6VJaObsMQr T07K+FdvLnjjJiLfU46K14KlQMx8nOIOCxfo0ub9cPJrw4M/4mwW6PaT3DcHEEclINIblUB8FMyO 7bl92aWxxjT3YbLEOmA0x3Sl ) ; Key ID = 55262`
	DNSKEY=41088/SEP is now in the chain-of-trust
	DS=41088/SHA-256 verifies DNSKEY=41088/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`fvap.gov. 7200 IN RRSIG ( DNSKEY 10 2 7200 20240914021111 20240911011111 41088 fvap.gov. QX2MxloiiXuikO9qchQPJjoZr6vUPVrCU+jhCv692DkTzn23B/nJdrrXg823MjRkoeB4oxAunpHs VhGB737LdXPvjPO4KLkZbD72xPhS+X9lPF6Oe21awJD3Qx8ixZ16ALC1x1vsxrtz37P06VC24Xz7 eK4zms6VJBN5gZUYFHO7hP7Q4xvvBbxJ/gqfnbqxHp4Rx1QiZtdXlo3NVZ7Kc9w3jPAvNaXAesBM 677PKu3x/yAqtmVzvMyuHEvmIWXUIABGA1fSJ/7uhlLL0exUsYM0jMgmovdF9OoJBzOr7Xiu9P4C zDSk/3uIyack8w28Z4nI3hNVPFXcdulzZqsdlw== )`
	`fvap.gov. 7200 IN RRSIG ( DNSKEY 10 2 7200 20240914021111 20240911011111 43062 fvap.gov. ZGfM7lRtlvUY/umcBU4UtLVIZou+xwLN1sNR0ZITyDDDvsnBBYMMrq0CKN09MQk/NlkNJ2MwEoTm Q+4lbM6UwNgPwyARXWl311UQFrXrg/XMzZcn+Yda83OSXoFNzSPMxLo7RY53fiaDeuBY8HjfJJyK mgC+VsimSkWwNxkTuOplFKy176vc/ZrHJKUVbx2JtYik1J7HoOub1YKugZnE+WvfxyRlvQMjs6Gu r1EsUTXB+XcBtNH/HXd6iiSn4B4m3C8eZIv57aTA0gY5nu+w8qSo6H4t/AvPRqNIVn0NMpsA/8sE VuPvHM1AWReebFHJcGR1smmtO1P18PgcZ+oYgw== )`
	RRSIG=41088 and DNSKEY=41088/SEP verifies the DNSKEY RRset
	RRSIG=43062 and DNSKEY=43062/SEP verifies the DNSKEY RRset
	DNSKEY=43062/SEP is now in the chain-of-trust
	DNSKEY=42603 is now in the chain-of-trust
	DNSKEY=55262 is now in the chain-of-trust
	Query to a6-67.akam.net for fvap.gov/A
	Received 237 bytes from 23.211.133.67
	;; Response received from [23.211.133.67] 237 octets ;; HEADER SECTION ;; id = 37354 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.222.16.40 fvap.gov. 20 IN A 23.222.16.90 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. Z7Nt/oMHmumkQB3Wyz9x5P0/OGx2lXRqfQ/2gNN/ThJGlPEgKLx2ye8a/eY/eLZGP4EA+pHo036+ fBERHO8XxMN0IIylKKdfoqhiTdg41cTPzWTrw1qvG97ezGwiNs15IRNWEKB649rtKwa3VTol/rQ/ j+6RN0LfqeclDjZ4t2E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a6-67.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a11-64.akam.net for fvap.gov/SOA
	Received 562 bytes from 84.53.139.64
	;; Response received from [84.53.139.64] 562 octets ;; HEADER SECTION ;; id = 15028 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265570 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. RxrMcy9VKm6zznR7C4+FZSlPLyLxMbbTIrf6JvzdvQZsdXFmkk9AGLNJ99qfiy7aDnTAw1LwFhhh rS1++5KshRj0qKVS85gk3E1BFCQlnvMCTpEYVKp/rkHrOx1chbxGvnBSQTPu19EAiI7oKf9KOSM4 R5MvQ02Mz4DszzExyd8= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. di0M7eFrUKnygOe4utkcHttC8CriCuwzJcG4nOD4RfTWwWbfWULF8MOGM+lH4vC9kuZy4ehjSzXC +rtNwh2H360Y8BGEZtOPPh4BeoSGIsjuyf79U3iKuHZE00Lti7AIH0PQuXyvUIgHtGAN3X2sIGBg bU2OsrUUjUbB4gspo/w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a18-65.akam.net for fvap.gov/SOA
	Received 562 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 562 octets ;; HEADER SECTION ;; id = 49837 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265570 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. RxrMcy9VKm6zznR7C4+FZSlPLyLxMbbTIrf6JvzdvQZsdXFmkk9AGLNJ99qfiy7aDnTAw1LwFhhh rS1++5KshRj0qKVS85gk3E1BFCQlnvMCTpEYVKp/rkHrOx1chbxGvnBSQTPu19EAiI7oKf9KOSM4 R5MvQ02Mz4DszzExyd8= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. di0M7eFrUKnygOe4utkcHttC8CriCuwzJcG4nOD4RfTWwWbfWULF8MOGM+lH4vC9kuZy4ehjSzXC +rtNwh2H360Y8BGEZtOPPh4BeoSGIsjuyf79U3iKuHZE00Lti7AIH0PQuXyvUIgHtGAN3X2sIGBg bU2OsrUUjUbB4gspo/w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-67.akam.net for fvap.gov/SOA
	Received 562 bytes from 96.7.50.67
	;; Response received from [96.7.50.67] 562 octets ;; HEADER SECTION ;; id = 45247 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265570 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. RxrMcy9VKm6zznR7C4+FZSlPLyLxMbbTIrf6JvzdvQZsdXFmkk9AGLNJ99qfiy7aDnTAw1LwFhhh rS1++5KshRj0qKVS85gk3E1BFCQlnvMCTpEYVKp/rkHrOx1chbxGvnBSQTPu19EAiI7oKf9KOSM4 R5MvQ02Mz4DszzExyd8= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. di0M7eFrUKnygOe4utkcHttC8CriCuwzJcG4nOD4RfTWwWbfWULF8MOGM+lH4vC9kuZy4ehjSzXC +rtNwh2H360Y8BGEZtOPPh4BeoSGIsjuyf79U3iKuHZE00Lti7AIH0PQuXyvUIgHtGAN3X2sIGBg bU2OsrUUjUbB4gspo/w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-124.akam.net for fvap.gov/SOA
	Received 562 bytes from 193.108.91.124
	;; Response received from [193.108.91.124] 562 octets ;; HEADER SECTION ;; id = 28916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265570 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. RxrMcy9VKm6zznR7C4+FZSlPLyLxMbbTIrf6JvzdvQZsdXFmkk9AGLNJ99qfiy7aDnTAw1LwFhhh rS1++5KshRj0qKVS85gk3E1BFCQlnvMCTpEYVKp/rkHrOx1chbxGvnBSQTPu19EAiI7oKf9KOSM4 R5MvQ02Mz4DszzExyd8= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. di0M7eFrUKnygOe4utkcHttC8CriCuwzJcG4nOD4RfTWwWbfWULF8MOGM+lH4vC9kuZy4ehjSzXC +rtNwh2H360Y8BGEZtOPPh4BeoSGIsjuyf79U3iKuHZE00Lti7AIH0PQuXyvUIgHtGAN3X2sIGBg bU2OsrUUjUbB4gspo/w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-66.akam.net for fvap.gov/SOA
	Received 562 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 562 octets ;; HEADER SECTION ;; id = 23691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265570 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. RxrMcy9VKm6zznR7C4+FZSlPLyLxMbbTIrf6JvzdvQZsdXFmkk9AGLNJ99qfiy7aDnTAw1LwFhhh rS1++5KshRj0qKVS85gk3E1BFCQlnvMCTpEYVKp/rkHrOx1chbxGvnBSQTPu19EAiI7oKf9KOSM4 R5MvQ02Mz4DszzExyd8= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20240914021111 20240911011111 55262 fvap.gov. di0M7eFrUKnygOe4utkcHttC8CriCuwzJcG4nOD4RfTWwWbfWULF8MOGM+lH4vC9kuZy4ehjSzXC +rtNwh2H360Y8BGEZtOPPh4BeoSGIsjuyf79U3iKuHZE00Lti7AIH0PQuXyvUIgHtGAN3X2sIGBg bU2OsrUUjUbB4gspo/w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a6-67.akam.net for fvap.gov/A
	Received 237 bytes from 23.211.133.67
	;; Response received from [23.211.133.67] 237 octets ;; HEADER SECTION ;; id = 38096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.222.16.90 fvap.gov. 20 IN A 23.222.16.40 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. Z7Nt/oMHmumkQB3Wyz9x5P0/OGx2lXRqfQ/2gNN/ThJGlPEgKLx2ye8a/eY/eLZGP4EA+pHo036+ fBERHO8XxMN0IIylKKdfoqhiTdg41cTPzWTrw1qvG97ezGwiNs15IRNWEKB649rtKwa3VTol/rQ/ j+6RN0LfqeclDjZ4t2E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fvap.gov A RR has value 23.222.16.90
	fvap.gov A RR has value 23.222.16.40
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. Z7Nt/oMHmumkQB3Wyz9x5P0/OGx2lXRqfQ/2gNN/ThJGlPEgKLx2ye8a/eY/eLZGP4EA+pHo036+ fBERHO8XxMN0IIylKKdfoqhiTdg41cTPzWTrw1qvG97ezGwiNs15IRNWEKB649rtKwa3VTol/rQ/ j+6RN0LfqeclDjZ4t2E= )`
	RRSIG=55262 and DNSKEY=55262 verifies the A RRset

fvap.gov

	Query to a18-65.akam.net for fvap.gov/A
	Received 237 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 237 octets ;; HEADER SECTION ;; id = 43220 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.48.203.109 fvap.gov. 20 IN A 23.48.203.115 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. mvYMJ2/yAdYSJqjp+3VHQeU9hk4HAgqArntDyl9JFbdYCxsO+yenAlSlWY6NMeLqG9x699vaX6US U9kTtdnV8PT0tPI0OjQ0N/UtS0sZM8PfqAnVpq05AdT1AN+43vmXrab90QHHN97+MiBgS5kH5Uc+ gUgtczxdNwHn9nEsQCg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a18-65.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a18-65.akam.net for fvap.gov/A
	Received 237 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 237 octets ;; HEADER SECTION ;; id = 17612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.48.203.115 fvap.gov. 20 IN A 23.48.203.109 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. mvYMJ2/yAdYSJqjp+3VHQeU9hk4HAgqArntDyl9JFbdYCxsO+yenAlSlWY6NMeLqG9x699vaX6US U9kTtdnV8PT0tPI0OjQ0N/UtS0sZM8PfqAnVpq05AdT1AN+43vmXrab90QHHN97+MiBgS5kH5Uc+ gUgtczxdNwHn9nEsQCg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fvap.gov A RR has value 23.48.203.115
	fvap.gov A RR has value 23.48.203.109
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. mvYMJ2/yAdYSJqjp+3VHQeU9hk4HAgqArntDyl9JFbdYCxsO+yenAlSlWY6NMeLqG9x699vaX6US U9kTtdnV8PT0tPI0OjQ0N/UtS0sZM8PfqAnVpq05AdT1AN+43vmXrab90QHHN97+MiBgS5kH5Uc+ gUgtczxdNwHn9nEsQCg= )`
	RRSIG=55262 and DNSKEY=55262 verifies the A RRset

fvap.gov

	Query to a11-64.akam.net for fvap.gov/A
	Received 237 bytes from 84.53.139.64
	;; Response received from [84.53.139.64] 237 octets ;; HEADER SECTION ;; id = 35610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.43.51.47 fvap.gov. 20 IN A 23.43.51.50 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. cY1CB734FBHCf2N4Y94fjzgiZ80KNB/PaJZtCwWzOboPtFQR4sUC20wahdNYYagtsXA51lt7Lpcx YPBWTSxWOeIauONfNgYE+lVuARYYy/qWab7x69u5GC109BI8o4SCuDLze5yKuCRu54Ae2ufIFYB6 njXUbwk6XVxz+N4UdNU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a11-64.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a11-64.akam.net for fvap.gov/A
	Received 237 bytes from 84.53.139.64
	;; Response received from [84.53.139.64] 237 octets ;; HEADER SECTION ;; id = 42971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.43.51.47 fvap.gov. 20 IN A 23.43.51.50 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. cY1CB734FBHCf2N4Y94fjzgiZ80KNB/PaJZtCwWzOboPtFQR4sUC20wahdNYYagtsXA51lt7Lpcx YPBWTSxWOeIauONfNgYE+lVuARYYy/qWab7x69u5GC109BI8o4SCuDLze5yKuCRu54Ae2ufIFYB6 njXUbwk6XVxz+N4UdNU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fvap.gov A RR has value 23.43.51.47
	fvap.gov A RR has value 23.43.51.50
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. cY1CB734FBHCf2N4Y94fjzgiZ80KNB/PaJZtCwWzOboPtFQR4sUC20wahdNYYagtsXA51lt7Lpcx YPBWTSxWOeIauONfNgYE+lVuARYYy/qWab7x69u5GC109BI8o4SCuDLze5yKuCRu54Ae2ufIFYB6 njXUbwk6XVxz+N4UdNU= )`
	RRSIG=55262 and DNSKEY=55262 verifies the A RRset

fvap.gov

	Query to a10-67.akam.net for fvap.gov/A
	Received 237 bytes from 96.7.50.67
	;; Response received from [96.7.50.67] 237 octets ;; HEADER SECTION ;; id = 7725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.1.33.12 fvap.gov. 20 IN A 23.1.33.5 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. LUb0jcgH/ISs3WfLDkeXuUFF1gcT1sc/pxKHKz5Eo1DzY1Bp5oCtcwhCGMbNtO1kc2unwLbrS8C0 xiIanS2yWmD6ysLtDGcuh4mGYQKvR+NSSBoymUNSRISaUQSRv4yYJqBao4eOYvJgN2fFKPQzbxc0 1zbzNjBNwKQVj2liYDw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a10-67.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a10-67.akam.net for fvap.gov/A
	Received 237 bytes from 96.7.50.67
	;; Response received from [96.7.50.67] 237 octets ;; HEADER SECTION ;; id = 11686 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.1.33.12 fvap.gov. 20 IN A 23.1.33.5 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. LUb0jcgH/ISs3WfLDkeXuUFF1gcT1sc/pxKHKz5Eo1DzY1Bp5oCtcwhCGMbNtO1kc2unwLbrS8C0 xiIanS2yWmD6ysLtDGcuh4mGYQKvR+NSSBoymUNSRISaUQSRv4yYJqBao4eOYvJgN2fFKPQzbxc0 1zbzNjBNwKQVj2liYDw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fvap.gov A RR has value 23.1.33.12
	fvap.gov A RR has value 23.1.33.5
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. LUb0jcgH/ISs3WfLDkeXuUFF1gcT1sc/pxKHKz5Eo1DzY1Bp5oCtcwhCGMbNtO1kc2unwLbrS8C0 xiIanS2yWmD6ysLtDGcuh4mGYQKvR+NSSBoymUNSRISaUQSRv4yYJqBao4eOYvJgN2fFKPQzbxc0 1zbzNjBNwKQVj2liYDw= )`
	RRSIG=55262 and DNSKEY=55262 verifies the A RRset

fvap.gov

	Query to a1-124.akam.net for fvap.gov/A
	Received 237 bytes from 193.108.91.124
	;; Response received from [193.108.91.124] 237 octets ;; HEADER SECTION ;; id = 35700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.219.82.203 fvap.gov. 20 IN A 23.219.82.187 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. qd8fZYoUt5VsMVBxrwFJe3WcfPU4kvzZ3eK9xMkHzOqIGW5ksQ2mOu1CxqAj6ICs54OYq9ep5BvF rib8lC8oD/CTls69TwftNP5zbVRNYS/Qcb6qIxOsa2UhsGd1cD8JIPK4kWTuJZIyv/RpVz30PLFZ pGeVYCNYsTavlLicg28= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-124.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a1-124.akam.net for fvap.gov/A
	Received 237 bytes from 193.108.91.124
	;; Response received from [193.108.91.124] 237 octets ;; HEADER SECTION ;; id = 504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.219.82.187 fvap.gov. 20 IN A 23.219.82.203 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. qd8fZYoUt5VsMVBxrwFJe3WcfPU4kvzZ3eK9xMkHzOqIGW5ksQ2mOu1CxqAj6ICs54OYq9ep5BvF rib8lC8oD/CTls69TwftNP5zbVRNYS/Qcb6qIxOsa2UhsGd1cD8JIPK4kWTuJZIyv/RpVz30PLFZ pGeVYCNYsTavlLicg28= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fvap.gov A RR has value 23.219.82.187
	fvap.gov A RR has value 23.219.82.203
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. qd8fZYoUt5VsMVBxrwFJe3WcfPU4kvzZ3eK9xMkHzOqIGW5ksQ2mOu1CxqAj6ICs54OYq9ep5BvF rib8lC8oD/CTls69TwftNP5zbVRNYS/Qcb6qIxOsa2UhsGd1cD8JIPK4kWTuJZIyv/RpVz30PLFZ pGeVYCNYsTavlLicg28= )`
	RRSIG=55262 and DNSKEY=55262 verifies the A RRset

fvap.gov

	Query to a5-66.akam.net for fvap.gov/A
	Received 237 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 237 octets ;; HEADER SECTION ;; id = 39210 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 104.119.189.185 fvap.gov. 20 IN A 104.119.189.184 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. galRcfy8s3N8BHOWC3k7xUfrxe6z2hxV1y3zMz6d72QdJxL+qhLz3Oh/I59OXQYtN5fDkzpFGWLc HSQLHsp1MF0GA18xccFeEhF0EJhYUh71oCJdOKsqeMd1PfP67xLsV4zeYF7Gn6W8eLQZDPXEqVB3 /Y7Ua9A7r2hbs7zB40c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-66.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a5-66.akam.net for fvap.gov/A
	Received 237 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 237 octets ;; HEADER SECTION ;; id = 53536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 104.119.189.184 fvap.gov. 20 IN A 104.119.189.185 fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. galRcfy8s3N8BHOWC3k7xUfrxe6z2hxV1y3zMz6d72QdJxL+qhLz3Oh/I59OXQYtN5fDkzpFGWLc HSQLHsp1MF0GA18xccFeEhF0EJhYUh71oCJdOKsqeMd1PfP67xLsV4zeYF7Gn6W8eLQZDPXEqVB3 /Y7Ua9A7r2hbs7zB40c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fvap.gov A RR has value 104.119.189.184
	fvap.gov A RR has value 104.119.189.185
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20240914021111 20240911011111 55262 fvap.gov. galRcfy8s3N8BHOWC3k7xUfrxe6z2hxV1y3zMz6d72QdJxL+qhLz3Oh/I59OXQYtN5fDkzpFGWLc HSQLHsp1MF0GA18xccFeEhF0EJhYUh71oCJdOKsqeMd1PfP67xLsV4zeYF7Gn6W8eLQZDPXEqVB3 /Y7Ua9A7r2hbs7zB40c= )`
	RRSIG=55262 and DNSKEY=55262 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fvap.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: