DNSSEC Debugger - fvap.gov

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-21 13:12:16 UTC

Analyzing DNSSEC problems for fvap.gov

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 48982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to c.root-servers.net for fvap.gov/A
	Received 615 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 615 octets ;; HEADER SECTION ;; id = 38312 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . 0/Yoz2I4hWtLLrICfXRMYiF0bbn4S+BknzBPpcsv+K8DGw63k2uIlNuajxzhnyJ2ToVVxGcw1wUf UiX6uqaUWE61gopvM62E3MZ6qtSx/upd6f3kaS668Bf75pmhL/0jSnIlc840ciZXdP6NBTU2LeKU vCIIT0LnDFn8NMsGfhY74x1ReFkfqoP9W7v5drDqS1Ky7leRUpqf/xK9BPMvH+PdGdy9AoXff8Dq n7R3n9k8s16b+YGJ/LZdtXoVr7oFc/hFPWU7sOt/yBqkqjZWa7zsbvc6GDpTuiRUqEEX9N2OvAlD n1P/4MrZ/iiu9QzJdhHZZ/LBh8GRnCvnhmShdQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 613 octets ;; HEADER SECTION ;; id = 9996 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . 0/Yoz2I4hWtLLrICfXRMYiF0bbn4S+BknzBPpcsv+K8DGw63k2uIlNuajxzhnyJ2ToVVxGcw1wUf UiX6uqaUWE61gopvM62E3MZ6qtSx/upd6f3kaS668Bf75pmhL/0jSnIlc840ciZXdP6NBTU2LeKU vCIIT0LnDFn8NMsGfhY74x1ReFkfqoP9W7v5drDqS1Ky7leRUpqf/xK9BPMvH+PdGdy9AoXff8Dq n7R3n9k8s16b+YGJ/LZdtXoVr7oFc/hFPWU7sOt/yBqkqjZWa7zsbvc6GDpTuiRUqEEX9N2OvAlD n1P/4MrZ/iiu9QzJdhHZZ/LBh8GRnCvnhmShdQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to f.root-servers.net for gov/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 32916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . 0/Yoz2I4hWtLLrICfXRMYiF0bbn4S+BknzBPpcsv+K8DGw63k2uIlNuajxzhnyJ2ToVVxGcw1wUf UiX6uqaUWE61gopvM62E3MZ6qtSx/upd6f3kaS668Bf75pmhL/0jSnIlc840ciZXdP6NBTU2LeKU vCIIT0LnDFn8NMsGfhY74x1ReFkfqoP9W7v5drDqS1Ky7leRUpqf/xK9BPMvH+PdGdy9AoXff8Dq n7R3n9k8s16b+YGJ/LZdtXoVr7oFc/hFPWU7sOt/yBqkqjZWa7zsbvc6GDpTuiRUqEEX9N2OvAlD n1P/4MrZ/iiu9QzJdhHZZ/LBh8GRnCvnhmShdQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . 0/Yoz2I4hWtLLrICfXRMYiF0bbn4S+BknzBPpcsv+K8DGw63k2uIlNuajxzhnyJ2ToVVxGcw1wUf UiX6uqaUWE61gopvM62E3MZ6qtSx/upd6f3kaS668Bf75pmhL/0jSnIlc840ciZXdP6NBTU2LeKU vCIIT0LnDFn8NMsGfhY74x1ReFkfqoP9W7v5drDqS1Ky7leRUpqf/xK9BPMvH+PdGdy9AoXff8Dq n7R3n9k8s16b+YGJ/LZdtXoVr7oFc/hFPWU7sOt/yBqkqjZWa7zsbvc6GDpTuiRUqEEX9N2OvAlD n1P/4MrZ/iiu9QzJdhHZZ/LBh8GRnCvnhmShdQ== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 58875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260909110635 20260710110635 2536 gov. wYFSwn+2NOLXZN63JbOAM8z/JNiiXG9veODJ7ZwOQmWG0+905DP5pegiAGD8ZRmv/Tr3NngFLooA Tpx/d4OmbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260909110635 20260710110635 2536 gov. wYFSwn+2NOLXZN63JbOAM8z/JNiiXG9veODJ7ZwOQmWG0+905DP5pegiAGD8ZRmv/Tr3NngFLooA Tpx/d4OmbA== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for fvap.gov/A
	Received 316 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 316 octets ;; HEADER SECTION ;; id = 5547 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fvap.gov. 10800 IN NS a1-124.akam.net. fvap.gov. 10800 IN NS a10-67.akam.net. fvap.gov. 10800 IN NS a11-64.akam.net. fvap.gov. 10800 IN NS a18-65.akam.net. fvap.gov. 10800 IN NS a5-66.akam.net. fvap.gov. 10800 IN NS a6-67.akam.net. fvap.gov. 3600 IN DS ( 41088 10 2 ff76608519fa96783e024e88bad7b69c7524ef1c87f70739c2ff664a1b8c50b8 ) fvap.gov. 3600 IN RRSIG ( DS 13 2 3600 20260722141216 20260720121216 35496 gov. SuAPRc8KLKCUanxXyVh91tTX2rXRc3anTyH43HRaixREysVcGq2c6xDpuIuVBW5x8kqykI7MlWXW Ep9n9oAFAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for fvap.gov/DNSKEY
	Received 316 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 316 octets ;; HEADER SECTION ;; id = 52018 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fvap.gov. 10800 IN NS a1-124.akam.net. fvap.gov. 10800 IN NS a10-67.akam.net. fvap.gov. 10800 IN NS a11-64.akam.net. fvap.gov. 10800 IN NS a18-65.akam.net. fvap.gov. 10800 IN NS a5-66.akam.net. fvap.gov. 10800 IN NS a6-67.akam.net. fvap.gov. 3600 IN DS ( 41088 10 2 ff76608519fa96783e024e88bad7b69c7524ef1c87f70739c2ff664a1b8c50b8 ) fvap.gov. 3600 IN RRSIG ( DS 13 2 3600 20260722141217 20260720121217 35496 gov. 1Y0Y2U9vrRUxxChDNchJoX592WnScd3A1XGpgY88o9Eq9d5xgaVjDwlq11JQ96EYEAW2JSAKqXID dbuXk9dM0A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone fvap.gov

fvap.gov

	Checking DS between gov and fvap.gov
	Query to d.ns.gov for fvap.gov/DS
	Received 184 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 184 octets ;; HEADER SECTION ;; id = 54015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN DS ;; ANSWER SECTION (2 records) fvap.gov. 3600 IN DS ( 41088 10 2 ff76608519fa96783e024e88bad7b69c7524ef1c87f70739c2ff664a1b8c50b8 ) fvap.gov. 3600 IN RRSIG ( DS 13 2 3600 20260722141217 20260720121217 35496 gov. 11/rCdHdA9wpvOjh9xgqw0FQELZE2qwekOopXxtZqCnCJMIWUiPIeWTT6yI0KoPqXQyYEO34oPn0 Gsht/ZYd9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fvap.gov in the gov zone
	DS=41088/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`fvap.gov. 3600 IN RRSIG ( DS 13 2 3600 20260722141217 20260720121217 35496 gov. 11/rCdHdA9wpvOjh9xgqw0FQELZE2qwekOopXxtZqCnCJMIWUiPIeWTT6yI0KoPqXQyYEO34oPn0 Gsht/ZYd9A== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=41088/SHA-256 is now in the chain-of-trust
	`fvap.gov. 3600 IN DS ( 41088 10 2 ff76608519fa96783e024e88bad7b69c7524ef1c87f70739c2ff664a1b8c50b8 )`
	Query to a10-67.akam.net for fvap.gov/DNSKEY
	Received 1477 bytes from 96.7.50.67
	;; Response received from [96.7.50.67] 1477 octets ;; HEADER SECTION ;; id = 41225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN DNSKEY ;; ANSWER SECTION (6 records) fvap.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAerx8dctJ/6+r8Zvj0vfqI1pSEUOMvvKwc9xS1nVDVV0Jz0RdMPnh2HukDr7uwx8QnA3lSY2 W0UJKse/g0gJR0KlaAWMg+F6vmANLiDP9d9AH/3ev+Xegs01ZG8B/XIG844YNiv5+9kK98ck44Km 6tH42kUDAeSoTKahNXTamdM3 ) ; keytag 32417 fvap.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAdrOwrv46vQolizEzsT8/U0BL9l8kKhdGVncN7gO+ZCx6VIo2jU7z2XDyU6VNUTKp5D8MXLv VrbAuaOOgenK70jKerP/PRER/pcfuT/hutLGmz/ph9p3vGnEbmJOoBxjdskz2J2DRLWOY5EAe43R FYwaZdWXVHC6l3rZ8evWU5JLupyRKgOWTR9rSLw6heZy0NqD6KaVd0261xY8spuhv/x1YGKAkxqg 0JPPJMrRCG4RV2pvVCdIBBvMYCRdWvN1dG/vEImPHSmlZw7SWr/WpJDk+zhgZXND9Rx0GCvEshEf EakWlTHsDJy/K3bKYbiFkehfZBm9d4kKq9DFg9w74BU= ) ; keytag 41088 fvap.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAciIanwJKbZiCqDFv9A3t6RuTFnaMBRFn5F3WLt58c9lFlK8M5do2uuIcEkdopoX11Iw5yn4 Qc7mJUJu2XMj4SGzKW5t9iDqmvyYGXcwr/VTttKw7DMw9FECTuma9sTTELEIFfa1+tlFaKMfCof2 B3soxLma91IunpMlAKLwcPrOHcB6hj6uwcUhoKgXI622aoMLtc/4BuSHFaWeKLocK9xXH8+/0nuK Q2jDUSG7l8bfpnZSe77jl3sPM3/irrCvHSGGXNP4MzfkBUfmM+peP/CLDJh7KgakDX2eq/Fl8u8O o9OpqQ4wd6d6bXxHCcy9tZF/92qgUk9+5SC247ESP2s= ) ; keytag 43062 fvap.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAZrTqp36RLveQMvl/+hBpLAYWxY8SUBCk98Fhsjph8KQuMfZs8f5++c42UQLwCna21tHkwep ptopCqnIE56YWyBcm3NPT6qs2zGNg/saimgZreh5Pvk0FaBsazELBqEZyDWHIm/mhGgpjXS5Jcgq 1Y/hKYRyDIj8PU1zBjeJmJUL ) ; keytag 37808 fvap.gov. 7200 IN RRSIG ( DNSKEY 10 2 7200 20260724021458 20260721011458 41088 fvap.gov. nrwlX4NYMXeRwtF27fnhKXWRxyx4CCdsdsEGgErLNiEy2BPHewmgFujg99OxryqisOhD5pfzBSct Bv3TFQkfcYrvyvsnfNjZ+oju6QiF+NsgA4InX0pH7hwaWW1vgPjbA36IvUhqf+A2geZz+y00x1r2 b/oJySrFOGT5vt5nsoXDFq4UuOi5+VcSLZcjReEBJHZjcoRK89G0UPyC+wo0Jo7i79X6nX+o5z0n zruzPEfLs1jTxrGU/s/IyFrklGNU3j8fVKBu63TaD03X6CQycnPgzmW5hGw4D7SL7S9yOdh4WMYx Ka43DGTVYnorKkRLxjdRX0YAaTlocF+bsLOuYw== ) fvap.gov. 7200 IN RRSIG ( DNSKEY 10 2 7200 20260724021458 20260721011458 43062 fvap.gov. a2yfQoSGFUOu9PtQEnfL/rbV0Hc3AMKXnvH+auhimng2Xh3dG4H+KrzluxUQPzgBkpDiUfxTVyR4 mhgYomTj7IgGlZ7kwYwrVrws/6IBN0cGpEgThdm/VnwJhxHkON+NP8I7pZM5JmCsppDr0SANdBy3 RtLEA/ddFTDkE17DFcPIs94sgOP4G6jgfnf1ixWEMmrDGw8IT3M975VHeRrmR9jgIj7iWbY1XGon erV9v8E63OTcUMz8wE/rah/cVd8Ek592qSVsXUnyZ+y1XY54fWbE1K0SjF10880frQ4zvjbgZbE6 SENoTHtiwnAfabLVSvcuuwhBZKT9cn1YzMnuSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for fvap.gov
	`fvap.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAerx8dctJ/6+r8Zvj0vfqI1pSEUOMvvKwc9xS1nVDVV0Jz0RdMPnh2HukDr7uwx8QnA3lSY2 W0UJKse/g0gJR0KlaAWMg+F6vmANLiDP9d9AH/3ev+Xegs01ZG8B/XIG844YNiv5+9kK98ck44Km 6tH42kUDAeSoTKahNXTamdM3 ) ; keytag 32417`
	`fvap.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAdrOwrv46vQolizEzsT8/U0BL9l8kKhdGVncN7gO+ZCx6VIo2jU7z2XDyU6VNUTKp5D8MXLv VrbAuaOOgenK70jKerP/PRER/pcfuT/hutLGmz/ph9p3vGnEbmJOoBxjdskz2J2DRLWOY5EAe43R FYwaZdWXVHC6l3rZ8evWU5JLupyRKgOWTR9rSLw6heZy0NqD6KaVd0261xY8spuhv/x1YGKAkxqg 0JPPJMrRCG4RV2pvVCdIBBvMYCRdWvN1dG/vEImPHSmlZw7SWr/WpJDk+zhgZXND9Rx0GCvEshEf EakWlTHsDJy/K3bKYbiFkehfZBm9d4kKq9DFg9w74BU= ) ; keytag 41088`
	`fvap.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAciIanwJKbZiCqDFv9A3t6RuTFnaMBRFn5F3WLt58c9lFlK8M5do2uuIcEkdopoX11Iw5yn4 Qc7mJUJu2XMj4SGzKW5t9iDqmvyYGXcwr/VTttKw7DMw9FECTuma9sTTELEIFfa1+tlFaKMfCof2 B3soxLma91IunpMlAKLwcPrOHcB6hj6uwcUhoKgXI622aoMLtc/4BuSHFaWeKLocK9xXH8+/0nuK Q2jDUSG7l8bfpnZSe77jl3sPM3/irrCvHSGGXNP4MzfkBUfmM+peP/CLDJh7KgakDX2eq/Fl8u8O o9OpqQ4wd6d6bXxHCcy9tZF/92qgUk9+5SC247ESP2s= ) ; keytag 43062`
	`fvap.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAZrTqp36RLveQMvl/+hBpLAYWxY8SUBCk98Fhsjph8KQuMfZs8f5++c42UQLwCna21tHkwep ptopCqnIE56YWyBcm3NPT6qs2zGNg/saimgZreh5Pvk0FaBsazELBqEZyDWHIm/mhGgpjXS5Jcgq 1Y/hKYRyDIj8PU1zBjeJmJUL ) ; keytag 37808`
	DNSKEY=41088/SEP is now in the chain-of-trust
	DS=41088/SHA-256 verifies DNSKEY=41088/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`fvap.gov. 7200 IN RRSIG ( DNSKEY 10 2 7200 20260724021458 20260721011458 41088 fvap.gov. nrwlX4NYMXeRwtF27fnhKXWRxyx4CCdsdsEGgErLNiEy2BPHewmgFujg99OxryqisOhD5pfzBSct Bv3TFQkfcYrvyvsnfNjZ+oju6QiF+NsgA4InX0pH7hwaWW1vgPjbA36IvUhqf+A2geZz+y00x1r2 b/oJySrFOGT5vt5nsoXDFq4UuOi5+VcSLZcjReEBJHZjcoRK89G0UPyC+wo0Jo7i79X6nX+o5z0n zruzPEfLs1jTxrGU/s/IyFrklGNU3j8fVKBu63TaD03X6CQycnPgzmW5hGw4D7SL7S9yOdh4WMYx Ka43DGTVYnorKkRLxjdRX0YAaTlocF+bsLOuYw== )`
	`fvap.gov. 7200 IN RRSIG ( DNSKEY 10 2 7200 20260724021458 20260721011458 43062 fvap.gov. a2yfQoSGFUOu9PtQEnfL/rbV0Hc3AMKXnvH+auhimng2Xh3dG4H+KrzluxUQPzgBkpDiUfxTVyR4 mhgYomTj7IgGlZ7kwYwrVrws/6IBN0cGpEgThdm/VnwJhxHkON+NP8I7pZM5JmCsppDr0SANdBy3 RtLEA/ddFTDkE17DFcPIs94sgOP4G6jgfnf1ixWEMmrDGw8IT3M975VHeRrmR9jgIj7iWbY1XGon erV9v8E63OTcUMz8wE/rah/cVd8Ek592qSVsXUnyZ+y1XY54fWbE1K0SjF10880frQ4zvjbgZbE6 SENoTHtiwnAfabLVSvcuuwhBZKT9cn1YzMnuSw== )`
	RRSIG=41088 and DNSKEY=41088/SEP verifies the DNSKEY RRset
	RRSIG=43062 and DNSKEY=43062/SEP verifies the DNSKEY RRset
	DNSKEY=32417 is now in the chain-of-trust
	DNSKEY=43062/SEP is now in the chain-of-trust
	DNSKEY=37808 is now in the chain-of-trust
	Query to a5-66.akam.net for fvap.gov/A
	Received 237 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 237 octets ;; HEADER SECTION ;; id = 64732 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.200.88.78 fvap.gov. 20 IN A 23.200.88.45 fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. fkIzvshM6QAsTFMJkUecidwsdNyYsSi6kFVPZ5tJHFZriedudYMGw1Wws3AR87mtsMowRWNjWEo9 MSlLxkj141QijI+AHOZTJaqFlRJOmAQFKH5acTCBXO7a6tZ589HQsrLGHLis4vgzVHp4/sIdwDcD mM0Y1bkdpesAsTfxnx8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-66.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a6-67.akam.net for fvap.gov/SOA
	Received 562 bytes from 23.211.133.67
	;; Response received from [23.211.133.67] 562 octets ;; HEADER SECTION ;; id = 1769 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265577 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. Nr79db5lPKn+JKKNWhFBEJibD2pRSjRJ4TaMl4pJaBV1es6PvzlIs+xRo5pim934HkZTKpcz7Yxl m9DraSspcbw2WHvd4XSTnxJvj6fzfhufWeNG+kk3HEV6sA4Fj8uwoPYDxsK9OrVlp5mEwrlPlMZX WnOtHQ6LBmBLpEjJo0s= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. hesLQD/iNdg4toJjo/Bm62gJSRbmqbtVcdznLfVrenwnGYcJjU2g2oAsjfBbcLRUQh/jFob8xExb 5Cx5pu/GM1fEXEKiG+AFOFyxwid41oQdaiKAYCOi5RKOixbeWTwi+wN1azwfpnZ7TxRqF6sysPY+ OFCuVsdbhVW42j7nRyI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a11-64.akam.net for fvap.gov/SOA
	Received 562 bytes from 84.53.139.64
	;; Response received from [84.53.139.64] 562 octets ;; HEADER SECTION ;; id = 18030 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265577 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. Nr79db5lPKn+JKKNWhFBEJibD2pRSjRJ4TaMl4pJaBV1es6PvzlIs+xRo5pim934HkZTKpcz7Yxl m9DraSspcbw2WHvd4XSTnxJvj6fzfhufWeNG+kk3HEV6sA4Fj8uwoPYDxsK9OrVlp5mEwrlPlMZX WnOtHQ6LBmBLpEjJo0s= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. hesLQD/iNdg4toJjo/Bm62gJSRbmqbtVcdznLfVrenwnGYcJjU2g2oAsjfBbcLRUQh/jFob8xExb 5Cx5pu/GM1fEXEKiG+AFOFyxwid41oQdaiKAYCOi5RKOixbeWTwi+wN1azwfpnZ7TxRqF6sysPY+ OFCuVsdbhVW42j7nRyI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a18-65.akam.net for fvap.gov/SOA
	Received 562 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 562 octets ;; HEADER SECTION ;; id = 295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265577 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. Nr79db5lPKn+JKKNWhFBEJibD2pRSjRJ4TaMl4pJaBV1es6PvzlIs+xRo5pim934HkZTKpcz7Yxl m9DraSspcbw2WHvd4XSTnxJvj6fzfhufWeNG+kk3HEV6sA4Fj8uwoPYDxsK9OrVlp5mEwrlPlMZX WnOtHQ6LBmBLpEjJo0s= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. hesLQD/iNdg4toJjo/Bm62gJSRbmqbtVcdznLfVrenwnGYcJjU2g2oAsjfBbcLRUQh/jFob8xExb 5Cx5pu/GM1fEXEKiG+AFOFyxwid41oQdaiKAYCOi5RKOixbeWTwi+wN1azwfpnZ7TxRqF6sysPY+ OFCuVsdbhVW42j7nRyI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-124.akam.net for fvap.gov/SOA
	Received 562 bytes from 193.108.91.124
	;; Response received from [193.108.91.124] 562 octets ;; HEADER SECTION ;; id = 15175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265577 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. Nr79db5lPKn+JKKNWhFBEJibD2pRSjRJ4TaMl4pJaBV1es6PvzlIs+xRo5pim934HkZTKpcz7Yxl m9DraSspcbw2WHvd4XSTnxJvj6fzfhufWeNG+kk3HEV6sA4Fj8uwoPYDxsK9OrVlp5mEwrlPlMZX WnOtHQ6LBmBLpEjJo0s= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. hesLQD/iNdg4toJjo/Bm62gJSRbmqbtVcdznLfVrenwnGYcJjU2g2oAsjfBbcLRUQh/jFob8xExb 5Cx5pu/GM1fEXEKiG+AFOFyxwid41oQdaiKAYCOi5RKOixbeWTwi+wN1azwfpnZ7TxRqF6sysPY+ OFCuVsdbhVW42j7nRyI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-67.akam.net for fvap.gov/SOA
	Received 562 bytes from 96.7.50.67
	;; Response received from [96.7.50.67] 562 octets ;; HEADER SECTION ;; id = 44061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN SOA ;; ANSWER SECTION (2 records) fvap.gov. 86400 IN SOA ( a10-67.akam.net. hostmaster.akamai.com. 1560265577 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) fvap.gov. 86400 IN RRSIG ( SOA 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. Nr79db5lPKn+JKKNWhFBEJibD2pRSjRJ4TaMl4pJaBV1es6PvzlIs+xRo5pim934HkZTKpcz7Yxl m9DraSspcbw2WHvd4XSTnxJvj6fzfhufWeNG+kk3HEV6sA4Fj8uwoPYDxsK9OrVlp5mEwrlPlMZX WnOtHQ6LBmBLpEjJo0s= ) ;; AUTHORITY SECTION (7 records) fvap.gov. 86400 IN NS a11-64.akam.net. fvap.gov. 86400 IN NS a10-67.akam.net. fvap.gov. 86400 IN NS a5-66.akam.net. fvap.gov. 86400 IN NS a18-65.akam.net. fvap.gov. 86400 IN NS a1-124.akam.net. fvap.gov. 86400 IN NS a6-67.akam.net. fvap.gov. 86400 IN RRSIG ( NS 10 2 86400 20260724021458 20260721011458 37808 fvap.gov. hesLQD/iNdg4toJjo/Bm62gJSRbmqbtVcdznLfVrenwnGYcJjU2g2oAsjfBbcLRUQh/jFob8xExb 5Cx5pu/GM1fEXEKiG+AFOFyxwid41oQdaiKAYCOi5RKOixbeWTwi+wN1azwfpnZ7TxRqF6sysPY+ OFCuVsdbhVW42j7nRyI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-66.akam.net for fvap.gov/A
	fvap.gov A RR has value 23.200.88.78
	fvap.gov A RR has value 23.200.88.45
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. fkIzvshM6QAsTFMJkUecidwsdNyYsSi6kFVPZ5tJHFZriedudYMGw1Wws3AR87mtsMowRWNjWEo9 MSlLxkj141QijI+AHOZTJaqFlRJOmAQFKH5acTCBXO7a6tZ589HQsrLGHLis4vgzVHp4/sIdwDcD mM0Y1bkdpesAsTfxnx8= )`
	RRSIG=37808 and DNSKEY=37808 verifies the A RRset

fvap.gov

	Query to a18-65.akam.net for fvap.gov/A
	Received 237 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 237 octets ;; HEADER SECTION ;; id = 11009 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.34.59.19 fvap.gov. 20 IN A 23.34.59.29 fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. kYwWTnB4NLjyNVh4KgPdPxt8Shn5oKj8ZJpp2nTKnpw+50ucsJLjMqXc+Yeuo1FTahyRy35sLjp/ paU7d9uzGjEa6UK0q5KnxfXrFpmkVUolMoC4nfAHIfCKcAkv6cy2B0l0q+/OhiuSn9rhcVamiMnm XsR5QxCPggR6QeHQU6U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a18-65.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a18-65.akam.net for fvap.gov/A
	fvap.gov A RR has value 23.34.59.19
	fvap.gov A RR has value 23.34.59.29
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. kYwWTnB4NLjyNVh4KgPdPxt8Shn5oKj8ZJpp2nTKnpw+50ucsJLjMqXc+Yeuo1FTahyRy35sLjp/ paU7d9uzGjEa6UK0q5KnxfXrFpmkVUolMoC4nfAHIfCKcAkv6cy2B0l0q+/OhiuSn9rhcVamiMnm XsR5QxCPggR6QeHQU6U= )`
	RRSIG=37808 and DNSKEY=37808 verifies the A RRset

fvap.gov

	Query to a1-124.akam.net for fvap.gov/A
	Received 237 bytes from 193.108.91.124
	;; Response received from [193.108.91.124] 237 octets ;; HEADER SECTION ;; id = 37344 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.200.88.45 fvap.gov. 20 IN A 23.200.88.78 fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. fkIzvshM6QAsTFMJkUecidwsdNyYsSi6kFVPZ5tJHFZriedudYMGw1Wws3AR87mtsMowRWNjWEo9 MSlLxkj141QijI+AHOZTJaqFlRJOmAQFKH5acTCBXO7a6tZ589HQsrLGHLis4vgzVHp4/sIdwDcD mM0Y1bkdpesAsTfxnx8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-124.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a1-124.akam.net for fvap.gov/A
	fvap.gov A RR has value 23.200.88.45
	fvap.gov A RR has value 23.200.88.78
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. fkIzvshM6QAsTFMJkUecidwsdNyYsSi6kFVPZ5tJHFZriedudYMGw1Wws3AR87mtsMowRWNjWEo9 MSlLxkj141QijI+AHOZTJaqFlRJOmAQFKH5acTCBXO7a6tZ589HQsrLGHLis4vgzVHp4/sIdwDcD mM0Y1bkdpesAsTfxnx8= )`
	RRSIG=37808 and DNSKEY=37808 verifies the A RRset

fvap.gov

	Query to a11-64.akam.net for fvap.gov/A
	Received 237 bytes from 84.53.139.64
	;; Response received from [84.53.139.64] 237 octets ;; HEADER SECTION ;; id = 33797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 95.101.31.69 fvap.gov. 20 IN A 95.101.31.76 fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. ElO3M48XoujtejpJY9EzsyNt91f1FgObQ/n/YPD5sZoR2URW8hRU1VcVPxa8r5xxci73CQsolu3C 4gsiqAZGOspbZ8UiN9KA5fHWrJVkSN9UtrmqXFHeJflMahgtryv9U2SZKDhLyWjr4Ylg71SYzJ6P 6bqXYEkBMh0ZGQWmGeA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a11-64.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a11-64.akam.net for fvap.gov/A
	fvap.gov A RR has value 95.101.31.69
	fvap.gov A RR has value 95.101.31.76
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. ElO3M48XoujtejpJY9EzsyNt91f1FgObQ/n/YPD5sZoR2URW8hRU1VcVPxa8r5xxci73CQsolu3C 4gsiqAZGOspbZ8UiN9KA5fHWrJVkSN9UtrmqXFHeJflMahgtryv9U2SZKDhLyWjr4Ylg71SYzJ6P 6bqXYEkBMh0ZGQWmGeA= )`
	RRSIG=37808 and DNSKEY=37808 verifies the A RRset

fvap.gov

	Query to a10-67.akam.net for fvap.gov/A
	Received 237 bytes from 96.7.50.67
	;; Response received from [96.7.50.67] 237 octets ;; HEADER SECTION ;; id = 19981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.34.59.29 fvap.gov. 20 IN A 23.34.59.19 fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. kYwWTnB4NLjyNVh4KgPdPxt8Shn5oKj8ZJpp2nTKnpw+50ucsJLjMqXc+Yeuo1FTahyRy35sLjp/ paU7d9uzGjEa6UK0q5KnxfXrFpmkVUolMoC4nfAHIfCKcAkv6cy2B0l0q+/OhiuSn9rhcVamiMnm XsR5QxCPggR6QeHQU6U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a10-67.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a10-67.akam.net for fvap.gov/A
	fvap.gov A RR has value 23.34.59.29
	fvap.gov A RR has value 23.34.59.19
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. kYwWTnB4NLjyNVh4KgPdPxt8Shn5oKj8ZJpp2nTKnpw+50ucsJLjMqXc+Yeuo1FTahyRy35sLjp/ paU7d9uzGjEa6UK0q5KnxfXrFpmkVUolMoC4nfAHIfCKcAkv6cy2B0l0q+/OhiuSn9rhcVamiMnm XsR5QxCPggR6QeHQU6U= )`
	RRSIG=37808 and DNSKEY=37808 verifies the A RRset

fvap.gov

	Query to a6-67.akam.net for fvap.gov/A
	Received 237 bytes from 23.211.133.67
	;; Response received from [23.211.133.67] 237 octets ;; HEADER SECTION ;; id = 64296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fvap.gov. IN A ;; ANSWER SECTION (3 records) fvap.gov. 20 IN A 23.33.42.75 fvap.gov. 20 IN A 23.33.42.68 fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. TDjdcBxosrIlBmHFlr8Ha3VSM8udkhbgy6okKCG51RgZZpc52Ke2Mk7bH/OK93QY6lEG6dJh3pO6 qHy9PwNarBOw8bp1BkLlphjVKmtHBk25dtgIkEVFqJI8bfXbiqwzsIcFYpA9dGISmf37zs51nv9E 7eYbftpojNXiBelIE3c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a6-67.akam.net is authoritative for fvap.gov
	Found RRSIG signed by fvap.gov zone
	Query to a6-67.akam.net for fvap.gov/A
	fvap.gov A RR has value 23.33.42.75
	fvap.gov A RR has value 23.33.42.68
	Found 1 RRSIGs over A RRset
	`fvap.gov. 20 IN RRSIG ( A 10 2 20 20260724021458 20260721011458 37808 fvap.gov. TDjdcBxosrIlBmHFlr8Ha3VSM8udkhbgy6okKCG51RgZZpc52Ke2Mk7bH/OK93QY6lEG6dJh3pO6 qHy9PwNarBOw8bp1BkLlphjVKmtHBk25dtgIkEVFqJI8bfXbiqwzsIcFYpA9dGISmf37zs51nv9E 7eYbftpojNXiBelIE3c= )`
	RRSIG=37808 and DNSKEY=37808 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fvap.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: